last executing test programs: 213.57777ms ago: executing program 1 (id=17427): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x800}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 177.241332ms ago: executing program 3 (id=17428): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000f40)={0x123, 0x3, 0x0, {0x6, 0x102, 0x0, 'kfree\x00\ns\xbc\x83L\xca\xc2>\xfd\xb25\x058\xe1\x96\x8dMx\xff\xf0p\xc96\x9e\x8a\x8c\xd9\xf7\xd7\xd8v\x9c\xfd\xc9\x8f0|\xa9\xeaW\x91\x9f\xe7b\x98id\xb1\v\xce0\xd3\xe2\'7\xab\va\xc0\x89\xdf\x99\xa0x\xfc\xfel\x1cu\xb4e\x8f\x9eA[\xb4\x11\x93Y@z\xf39\xff\xa4\xc8EW\xfd\xa2\xeb\xb0@\xe6kD\xab$H\xe0`{n)G5\xa9z\vN5\x1at\xd1\x14f\xa3\xf6\'\xdb\":\xe7g\n\n\xc2\\V\x8f\xa7oRe\x12x/\xdaf\xd1\xcaj\xd3\xdc}\xf0C~\xc6)\x82a\x99\xb0\xaf\x15lO\x9f\'\xe3\xee\x90\"\x95\b\t]\xe9\xd2\xear\x9b\x1b\xa6\x0fG\x16[_\xfa\x81\xfb\x98}R\xdf7\xbd!\v\xb2\x0e\x19\xdfs\x87QJd9\xab\x8dE9U}SFS\a-\xd3\xca$\xdd\xfd\xd3\x1e\xbdgZ\x8b\x90\xec\xe5`\xb2H\xb5\xc2\x94\x8f\x94\xae\xadb|a&\xdc\x95\x8d;\x96\x8f)\x1d-v5\xf6'}}, 0x123) 174.226042ms ago: executing program 2 (id=17429): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)={0x14, 0x6a, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x48000}, 0x0) 163.843076ms ago: executing program 3 (id=17430): mkdir(&(0x7f0000000140)='./file0\x00', 0xe8) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='hpfs\x00', 0x200219, 0x0) 163.758456ms ago: executing program 0 (id=17431): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x0, 0x4, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) 162.51356ms ago: executing program 1 (id=17432): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 162.350294ms ago: executing program 2 (id=17433): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, &(0x7f0000000140)) 140.247474ms ago: executing program 0 (id=17434): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f0000000240)={[{'noacl'}]}) 136.644512ms ago: executing program 3 (id=17435): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xa, 0x2, 0x2, "953a23d0cbfbe9ce00eafd00", 0x384c4150}) 136.290892ms ago: executing program 2 (id=17436): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x72}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 78.86975ms ago: executing program 1 (id=17437): madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 78.660659ms ago: executing program 0 (id=17438): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000140), 0x56) 78.469919ms ago: executing program 0 (id=17439): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={[{@volatile}]}) 78.42799ms ago: executing program 2 (id=17440): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000f40)={0x123, 0x3, 0x0, {0x6, 0x102, 0x0, 'kfree\x00\ns\xbc\x83L\xca\xc2>\xfd\xb25\x058\xe1\x96\x8dMx\xff\xf0p\xc96\x9e\x8a\x8c\xd9\xf7\xd7\xd8v\x9c\xfd\xc9\x8f0|\xa9\xeaW\x91\x9f\xe7b\x98id\xb1\v\xce0\xd3\xe2\'7\xab\va\xc0\x89\xdf\x99\xa0x\xfc\xfel\x1cu\xb4e\x8f\x9eA[\xb4\x11\x93Y@z\xf39\xff\xa4\xc8EW\xfd\xa2\xeb\xb0@\xe6kD\xab$H\xe0`{n)G5\xa9z\vN5\x1at\xd1\x14f\xa3\xf6\'\xdb\":\xe7g\n\n\xc2\\V\x8f\xa7oRe\x12x/\xdaf\xd1\xcaj\xd3\xdc}\xf0C~\xc6)\x82a\x99\xb0\xaf\x15lO\x9f\'\xe3\xee\x90\"\x95\b\t]\xe9\xd2\xear\x9b\x1b\xa6\x0fG\x16[_\xfa\x81\xfb\x98}R\xdf7\xbd!\v\xb2\x0e\x19\xdfs\x87QJd9\xab\x8dE9U}SFS\a-\xd3\xca$\xdd\xfd\xd3\x1e\xbdgZ\x8b\x90\xec\xe5`\xb2H\xb5\xc2\x94\x8f\x94\xae\xadb|a&\xdc\x95\x8d;\x96\x8f)\x1d-v5\xf6'}}, 0x123) 76.813416ms ago: executing program 3 (id=17445): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6}]}}}]}, 0x44}}, 0x4000010) 53.04023ms ago: executing program 1 (id=17441): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x20, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4f}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) 49.37489ms ago: executing program 0 (id=17442): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)={0x14, 0x6a, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x48000}, 0x0) 49.311064ms ago: executing program 2 (id=17443): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'dt2801\x00', [0x4f27, 0x5, 0x3, 0x4008004, 0x5, 0xcc9, 0xf, 0x2fd0, 0xa, 0x8001, 0x2, 0xfffffff9, 0xfffffffe, 0x1, 0x43, 0x101, 0x0, 0x1a449, 0x3, 0x8, 0x99, 0x8, 0x0, 0x20001e58, 0x7, 0xe69, 0x3c, 0x6, 0x7, 0x0, 0xfffffff8]}) 48.678128ms ago: executing program 3 (id=17444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 6.687763ms ago: executing program 1 (id=17446): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 6.39678ms ago: executing program 3 (id=17447): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) read(r0, &(0x7f0000000200)=""/19, 0xffffff42) 6.225879ms ago: executing program 0 (id=17448): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/181, 0xb5, 0x365) 92.377µs ago: executing program 1 (id=17449): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x72}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 0s ago: executing program 2 (id=17450): r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)={0x0, 0xc46, 0x2}) kernel console output (not intermixed with test programs): cutor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 193.763893][ T1107] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 193.769222][ T1107] ata1.00: configured for UDMA/100 [ 193.881015][T26585] netlink: 'syz.1.10112': attribute type 1 has an invalid length. [ 193.991848][T26607] netlink: 'syz.0.10123': attribute type 1 has an invalid length. [ 194.048803][ T5851] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 194.217947][T26651] netlink: set zone limit has 4 unknown bytes [ 194.232338][ T5851] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.236561][ T5851] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.242040][ T5851] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 194.257903][ T5851] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.262843][ T5851] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.268536][ T5851] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.272321][ T5851] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.276161][ T5851] usb 7-1: Product: syz [ 194.277911][ T5851] usb 7-1: Manufacturer: syz [ 194.292681][ T5851] cdc_wdm 7-1:1.0: skipping garbage [ 194.296501][ T5851] cdc_wdm 7-1:1.0: skipping garbage [ 194.301160][ T5851] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 194.303677][ T5851] cdc_wdm 7-1:1.0: Unknown control protocol [ 194.311526][T26668] lo: entered promiscuous mode [ 194.313172][T26668] lo: entered allmulticast mode [ 194.315217][T26668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.329476][ T40] audit: type=1326 audit(1104.227:63381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26670 comm="syz.3.10151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 194.338435][ T40] audit: type=1326 audit(1104.227:63382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26670 comm="syz.3.10151" exe="/syz-executor" sig=0 arch=40000003 syscall=131 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 194.360015][ T40] audit: type=1326 audit(1104.227:63383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26670 comm="syz.3.10151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 194.370869][ T40] audit: type=1326 audit(1104.227:63384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26670 comm="syz.3.10151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 194.503897][T26569] cdc_wdm 7-1:1.0: Error submitting int urb - -90 [ 194.507077][ T1021] usb 7-1: USB disconnect, device number 12 [ 194.637578][T26719] netlink: 'syz.1.10175': attribute type 10 has an invalid length. [ 194.779040][T26728] : entered promiscuous mode [ 194.780753][T26728] : entered allmulticast mode [ 194.783954][T26728] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 195.026711][T26764] program syz.3.10198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.077983][T26768] geneve2: entered allmulticast mode [ 195.251882][T26806] netlink: 'syz.0.10219': attribute type 1 has an invalid length. [ 195.288941][T26812] program syz.0.10221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.290065][T26810] geneve3: entered allmulticast mode [ 195.417221][ T7872] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 195.590874][ T7872] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 195.594168][ T7872] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.598121][ T7872] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 195.598144][T26842] geneve3: entered allmulticast mode [ 195.603139][ T7872] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.607893][ T7872] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.613799][ T7872] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 195.617162][ T7872] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 195.620345][ T7872] usb 6-1: Product: syz [ 195.621967][ T7872] usb 6-1: Manufacturer: syz [ 195.629857][ T7872] cdc_wdm 6-1:1.0: skipping garbage [ 195.633829][ T7872] cdc_wdm 6-1:1.0: skipping garbage [ 195.637164][ T7872] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 195.639514][ T7872] cdc_wdm 6-1:1.0: Unknown control protocol [ 195.848315][T26790] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 195.852009][ T7872] usb 6-1: USB disconnect, device number 11 [ 196.536502][T26871] PKCS8: Unsupported PKCS#8 version [ 196.722963][T26909] nfs: Deprecated parameter 'nointr' [ 196.749952][T26913] overlayfs: cannot append lower layer [ 197.094853][T26957] overlayfs: cannot append lower layer [ 197.423656][T27005] __nla_validate_parse: 20 callbacks suppressed [ 197.423675][T27005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10316'. [ 197.425534][T27004] overlayfs: cannot append lower layer [ 197.426167][T27005] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10316'. [ 197.437349][T27009] nfs: Deprecated parameter 'nointr' [ 197.437440][T27005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10316'. [ 197.445420][T27005] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10316'. [ 197.445433][T27005] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10316'. [ 197.653200][T27031] nfs: Deprecated parameter 'nointr' [ 197.665955][T27033] ipt_REJECT: TCP_RESET invalid for non-tcp [ 197.765413][T27043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10333'. [ 197.768026][T27043] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10333'. [ 197.770855][T27043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10333'. [ 197.773618][T27043] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10333'. [ 197.776220][T27043] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10333'. [ 197.940185][ T7872] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 198.030818][T27075] PKCS8: Unsupported PKCS#8 version [ 198.111177][ T7872] usb 8-1: Using ep0 maxpacket: 16 [ 198.116993][ T7872] usb 8-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 198.119897][ T7872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.123060][ T7872] usb 8-1: Product: syz [ 198.124408][ T7872] usb 8-1: Manufacturer: syz [ 198.125888][ T7872] usb 8-1: SerialNumber: syz [ 198.132726][ T7872] usb 8-1: config 0 descriptor?? [ 198.144870][ T7872] as10x_usb: device has been detected [ 198.147268][ T7872] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 198.159910][ T7872] usb 8-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 198.180336][ T7872] as10x_usb: error during firmware upload part1 [ 198.182621][ T7872] Registered device Sky IT Digital Key (green led) [ 198.246658][T27105] PKCS8: Unsupported PKCS#8 version [ 198.315306][T27117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.370984][T27035] random: crng reseeded on system resumption [ 198.386944][ T7872] usb 8-1: USB disconnect, device number 11 [ 198.405892][ T7872] Unregistered device Sky IT Digital Key (green led) [ 198.407111][ T7872] as10x_usb: device has been disconnected [ 198.973618][T27139] PKCS8: Unsupported PKCS#8 version [ 199.140800][T27171] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 199.146767][T27171] Error validating options; rc = [-22] [ 199.772901][T27280] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 199.777050][T27280] Error validating options; rc = [-22] [ 200.754166][T27317] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 200.759408][T27317] Error validating options; rc = [-22] [ 201.074467][T27368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.463646][T27443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.269912][T27531] overlayfs: conflicting options: userxattr,metacopy=on [ 202.599564][T27580] overlayfs: conflicting options: userxattr,metacopy=on [ 202.807571][T27609] overlayfs: conflicting options: userxattr,metacopy=on [ 203.250901][T27668] __nla_validate_parse: 9 callbacks suppressed [ 203.250913][T27668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10643'. [ 203.298530][T27669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10642'. [ 203.477821][ T6018] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 203.567658][T27705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10657'. [ 203.638398][ T6018] usb 7-1: Using ep0 maxpacket: 16 [ 203.639707][T27714] netlink: 'syz.0.10669': attribute type 11 has an invalid length. [ 203.642715][T27714] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10669'. [ 203.643087][ T6018] usb 7-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 203.660732][ T6018] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.663537][ T6018] usb 7-1: Product: syz [ 203.665144][ T6018] usb 7-1: Manufacturer: syz [ 203.667077][ T6018] usb 7-1: SerialNumber: syz [ 203.672171][ T6018] usb 7-1: config 0 descriptor?? [ 203.681714][ T6018] as10x_usb: device has been detected [ 203.683981][ T6018] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 203.700747][ T6018] usb 7-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 203.706368][ T6018] as10x_usb: error during firmware upload part1 [ 203.708520][ T6018] Registered device Sky IT Digital Key (green led) [ 203.824498][T27737] openvswitch: netlink: IP tunnel dst address not specified [ 203.904083][T27664] random: crng reseeded on system resumption [ 203.911668][ T54] usb 7-1: USB disconnect, device number 13 [ 203.928370][ T54] Unregistered device Sky IT Digital Key (green led) [ 203.929502][ T54] as10x_usb: device has been disconnected [ 204.492903][T27752] dlm: plock device version mismatch: kernel (1.2.0), user (1.1792.0) [ 204.497323][T27754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10673'. [ 204.538577][T27764] netlink: 'syz.2.10682': attribute type 21 has an invalid length. [ 204.673553][T27794] cgroup: Invalid name [ 204.716994][T27803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10702'. [ 204.819776][T27826] netlink: 'syz.1.10711': attribute type 21 has an invalid length. [ 204.853093][T27835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10716'. [ 204.956236][T27858] tmpfs: Bad value for 'mpol' [ 204.960323][T27861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10730'. [ 204.989488][T27869] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 204.991554][T27869] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 204.994709][T27869] vhci_hcd vhci_hcd.0: Device attached [ 205.011816][T27870] vhci_hcd: unknown pdu 2 [ 205.017368][ T1245] vhci_hcd: stop threads [ 205.018742][ T1245] vhci_hcd: release socket [ 205.020466][ T1245] vhci_hcd: disconnect device [ 205.091612][T27887] cgroup: Invalid name [ 205.127310][T27891] tmpfs: Bad value for 'mpol' [ 205.301011][T27913] tmpfs: Bad value for 'mpol' [ 205.397227][T27930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10764'. [ 205.472156][T27942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10775'. [ 205.491910][T27946] comedi comedi3: pcl726: I/O port conflict (0xd4,16) [ 205.576297][T27962] new mount options do not match the existing superblock, will be ignored [ 205.637619][T27974] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 205.639840][T27974] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 205.643143][T27974] vhci_hcd vhci_hcd.0: Device attached [ 205.647160][T27975] vhci_hcd: unknown pdu 2 [ 205.651228][ T73] vhci_hcd: stop threads [ 205.652696][ T73] vhci_hcd: release socket [ 205.654173][ T73] vhci_hcd: disconnect device [ 205.770102][T28003] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 205.794460][T28007] binder: 28005:28007 ioctl 400c620e 80000240 returned -22 [ 205.952457][T28036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.097071][ T5851] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 206.218601][T28068] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 206.245124][T28071] binder: 28069:28071 ioctl 400c620e 80000240 returned -22 [ 206.280413][ T5851] usb 6-1: Using ep0 maxpacket: 16 [ 206.288896][ T5851] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 206.292836][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.295937][ T5851] usb 6-1: Product: syz [ 206.297536][ T5851] usb 6-1: Manufacturer: syz [ 206.299311][ T5851] usb 6-1: SerialNumber: syz [ 206.303864][ T5851] usb 6-1: config 0 descriptor?? [ 206.312618][ T5851] as10x_usb: device has been detected [ 206.315352][ T5851] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 206.333526][ T5851] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 206.341634][ T5851] as10x_usb: error during firmware upload part1 [ 206.344690][ T5851] Registered device Sky IT Digital Key (green led) [ 206.415575][T28092] new mount options do not match the existing superblock, will be ignored [ 206.459388][T28098] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 206.531034][T28021] random: crng reseeded on system resumption [ 206.540436][ T7872] usb 6-1: USB disconnect, device number 12 [ 206.552213][ T7872] Unregistered device Sky IT Digital Key (green led) [ 206.553496][ T7872] as10x_usb: device has been disconnected [ 207.122735][T28124] new mount options do not match the existing superblock, will be ignored [ 207.532798][T28182] netlink: 'syz.1.10886': attribute type 5 has an invalid length. [ 207.564291][T28186] program syz.0.10888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.580116][T28190] binder: 28189:28190 ioctl c018620c 80000380 returned -22 [ 207.692377][T28216] netlink: 'syz.0.10901': attribute type 3 has an invalid length. [ 207.749439][T28229] cgroup: noprefix used incorrectly [ 207.971272][T28292] netlink: 'syz.3.10944': attribute type 3 has an invalid length. [ 208.011980][T28300] binder: 28299:28300 ioctl c018620c 80000380 returned -22 [ 208.029738][T28306] program syz.2.10948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.152425][T28334] program syz.3.10961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.344641][T28377] libceph: resolve ' [ 208.344641][T28377] -&fYǝa2i [ 208.344641][T28377] .?&*&' (ret=-3): failed [ 208.353142][T28380] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 208.433317][T28402] netlink: 'syz.0.10995': attribute type 3 has an invalid length. [ 208.447567][T28406] libceph: resolve ' [ 208.447567][T28406] -&fYǝa2i [ 208.447567][T28406] .?&*&' (ret=-3): failed [ 208.470890][T28413] /dev/nullb0: Can't open blockdev [ 208.523817][T28425] overlay: Bad value for 'workdir' [ 208.526071][T28428] netlink: 'syz.0.11006': attribute type 5 has an invalid length. [ 208.582912][T28441] libceph: resolve ' [ 208.582912][T28441] -&fYǝa2i [ 208.582912][T28441] .?&*&' (ret=-3): failed [ 208.594202][T28447] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 208.722933][T28473] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 208.876334][T28502] overlay: Bad value for 'workdir' [ 209.001157][T28528] overlay: Bad value for 'workdir' [ 209.024597][T28533] netlink: 'syz.0.11058': attribute type 2 has an invalid length. [ 209.027762][T28533] netlink: 'syz.0.11058': attribute type 1 has an invalid length. [ 209.320744][T28604] netlink: 'syz.1.11095': attribute type 2 has an invalid length. [ 209.975479][T28720] __nla_validate_parse: 143 callbacks suppressed [ 209.975491][T28720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11152'. [ 209.996251][T28722] tmpfs: Bad value for 'size' [ 210.005644][T28724] tmpfs: Group quota block hardlimit too large. [ 210.131181][T28744] tmpfs: Bad value for 'size' [ 210.137585][T28746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11166'. [ 210.161339][T28750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11165'. [ 210.318473][T28780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11181'. [ 210.371422][T28790] validate_nla: 3 callbacks suppressed [ 210.371438][T28790] netlink: 'syz.2.11186': attribute type 11 has an invalid length. [ 210.392476][T28796] Invalid source name [ 210.422191][T28802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11194'. [ 210.560967][T28831] netlink: 'syz.3.11209': attribute type 4 has an invalid length. [ 210.714900][T28863] netlink: 'syz.0.11223': attribute type 11 has an invalid length. [ 210.787507][T28871] Invalid source name [ 210.965793][T28909] overlayfs: unescaped trailing colons in lowerdir mount option. [ 210.966866][T28910] program syz.1.11245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.093336][T28944] overlayfs: unescaped trailing colons in lowerdir mount option. [ 211.215983][T28974] overlayfs: unescaped trailing colons in lowerdir mount option. [ 211.415069][T29018] overlayfs: missing 'lowerdir' [ 211.484788][T29034] overlayfs: missing 'lowerdir' [ 211.602210][T29063] QAT: failed to copy from user cfg_data. [ 211.721833][T29089] QAT: failed to copy from user cfg_data. [ 211.842214][T29123] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 211.850324][T29123] xt_TPROXY: Can be used only with -p tcp or -p udp [ 211.993973][T29162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.043886][T29171] netlink: 'syz.2.11373': attribute type 21 has an invalid length. [ 212.046407][T29171] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11373'. [ 212.049346][T29171] netlink: 'syz.2.11373': attribute type 5 has an invalid length. [ 212.052410][T29171] netlink: 'syz.2.11373': attribute type 6 has an invalid length. [ 212.054919][T29171] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11373'. [ 212.100213][T29182] xt_TPROXY: Can be used only with -p tcp or -p udp [ 212.872257][T29284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11429'. [ 212.911606][T29290] CIFS mount error: No usable UNC path provided in device string! [ 212.911606][T29290] [ 212.914917][T29290] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 212.915903][T29294] openvswitch: netlink: Key type 177 is out of range max 32 [ 212.967690][T29302] netlink: 'syz.2.11437': attribute type 1 has an invalid length. [ 213.029139][T29308] tmpfs: Bad value for 'mpol' [ 213.044675][T29314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11443'. [ 213.152607][T29338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11456'. [ 213.154059][T29339] netlink: 'syz.0.11455': attribute type 1 has an invalid length. [ 213.155910][T29340] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 213.267206][T29358] CIFS mount error: No usable UNC path provided in device string! [ 213.267206][T29358] [ 213.270443][T29358] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 213.301467][T29364] netlink: 'syz.3.11468': attribute type 1 has an invalid length. [ 213.370468][T29376] usb usb9: usbfs: process 29376 (syz.1.11473) did not claim interface 0 before use [ 213.404495][T29384] tmpfs: Bad value for 'mpol' [ 213.751464][ T54] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 213.859502][T29458] usb usb9: usbfs: process 29458 (syz.2.11515) did not claim interface 0 before use [ 213.868646][T29462] syz.0.11517: attempt to access beyond end of device [ 213.868646][T29462] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 213.874804][T29462] EXT4-fs (nbd0): unable to read superblock [ 213.892721][T29464] netlink: 'syz.2.11524': attribute type 1 has an invalid length. [ 213.961728][ T54] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 213.964705][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.968771][ T54] usb 8-1: Product: syz [ 213.970118][ T54] usb 8-1: Manufacturer: syz [ 213.971691][ T54] usb 8-1: SerialNumber: syz [ 213.976452][ T54] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 214.005816][T18606] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 214.443219][ T5851] usb 8-1: USB disconnect, device number 12 [ 215.013680][ T40] audit: type=1326 audit(2000000016.070:63385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29508 comm="syz.0.11549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 215.033520][ T40] audit: type=1326 audit(2000000016.070:63386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29508 comm="syz.0.11549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 215.040367][ T40] audit: type=1326 audit(2000000016.070:63387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29508 comm="syz.0.11549" exe="/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 215.047413][ T40] audit: type=1326 audit(2000000016.070:63388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29508 comm="syz.0.11549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 215.055457][ T40] audit: type=1326 audit(2000000016.070:63389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29508 comm="syz.0.11549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 215.109288][T18606] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 215.115488][T18606] ath9k_htc: Failed to initialize the device [ 215.117712][ T5851] usb 8-1: ath9k_htc: USB layer deinitialized [ 215.355949][ T5312] Bluetooth: hci0: command tx timeout [ 215.356174][T29559] __nla_validate_parse: 7 callbacks suppressed [ 215.356188][T29559] netlink: 248 bytes leftover after parsing attributes in process `syz.3.11567'. [ 215.519114][T29587] netlink: 244 bytes leftover after parsing attributes in process `syz.0.11579'. [ 215.523849][T29587] NCSI netlink: No device for ifindex 0 [ 215.606256][T29596] : left allmulticast mode [ 215.608590][T29596] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 215.694054][T29612] team0: Device hsr_slave_0 failed to register rx_handler [ 215.780343][T29634] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 215.864773][T29652] validate_nla: 3 callbacks suppressed [ 215.864784][T29652] netlink: 'syz.2.11605': attribute type 10 has an invalid length. [ 215.872198][T29652] team0: Device hsr_slave_0 failed to register rx_handler [ 215.965278][T29674] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 216.025173][T29686] netlink: 'syz.2.11622': attribute type 1 has an invalid length. [ 216.027731][T29686] netlink: 244 bytes leftover after parsing attributes in process `syz.2.11622'. [ 216.031191][T29686] NCSI netlink: No device for ifindex 0 [ 216.042864][T29690] netlink: 'syz.0.11623': attribute type 10 has an invalid length. [ 216.048878][T29690] team0: Device hsr_slave_0 failed to register rx_handler [ 216.262719][T29710] lo: left allmulticast mode [ 216.264763][T29710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.916174][ T6018] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 216.945985][T29798] wg1 speed is unknown, defaulting to 1000 [ 217.090677][ T6018] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 217.094479][ T6018] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.108406][ T6018] usb 5-1: Product: syz [ 217.110351][ T6018] usb 5-1: Manufacturer: syz [ 217.112369][ T6018] usb 5-1: SerialNumber: syz [ 217.132843][ T6018] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 217.168543][ T1471] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 217.223112][T29829] wg1 speed is unknown, defaulting to 1000 [ 217.474328][T29858] wg1 speed is unknown, defaulting to 1000 [ 217.516351][T29861] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11704'. [ 217.640659][ T6018] usb 5-1: USB disconnect, device number 10 [ 218.225854][T29890] wg1 speed is unknown, defaulting to 1000 [ 218.262924][ T1471] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 218.265976][ T1471] ath9k_htc: Failed to initialize the device [ 218.269127][ T6018] usb 5-1: ath9k_htc: USB layer deinitialized [ 218.671519][ C3] ata1: illegal qc_active transition (00000000->00001000) [ 219.015213][ T1107] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 219.019202][ T1107] ata1.00: configured for UDMA/100 [ 219.100392][T29956] kAFS: unparsable volume name [ 219.103907][T29958] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11751'. [ 219.142536][T29966] netlink: 'syz.1.11757': attribute type 1 has an invalid length. [ 219.205988][T29980] /dev/nullb0: Can't open blockdev [ 219.234434][T29987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11767'. [ 219.242893][T29993] netlink: 'syz.0.11769': attribute type 3 has an invalid length. [ 219.245459][T29993] netlink: 'syz.0.11769': attribute type 1 has an invalid length. [ 219.250894][T29993] netlink: 216 bytes leftover after parsing attributes in process `syz.0.11769'. [ 219.253740][T29993] NCSI netlink: No device for ifindex 33022 [ 219.288387][T30002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11779'. [ 219.327197][T30010] /dev/nullb0: Can't open blockdev [ 219.370798][T30023] netlink: 'syz.1.11784': attribute type 3 has an invalid length. [ 219.373297][T30023] netlink: 'syz.1.11784': attribute type 1 has an invalid length. [ 219.376963][T30023] netlink: 216 bytes leftover after parsing attributes in process `syz.1.11784'. [ 219.379884][T30023] NCSI netlink: No device for ifindex 33022 [ 219.415534][T30031] /dev/nullb0: Can't open blockdev [ 219.431764][T30033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11788'. [ 219.532557][T30057] netlink: 'syz.2.11798': attribute type 3 has an invalid length. [ 219.536726][T30057] netlink: 'syz.2.11798': attribute type 1 has an invalid length. [ 219.539206][T30057] NCSI netlink: No device for ifindex 33022 [ 219.586849][T30066] kAFS: unparsable volume name [ 219.728006][T30096] kAFS: unparsable volume name [ 219.963887][T30146] openvswitch: netlink: IP tunnel dst address not specified [ 220.006557][ C3] ata1: illegal qc_active transition (00000000->00000100) [ 220.351626][ T1107] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 220.359431][ T1107] ata1.00: configured for UDMA/100 [ 220.835217][T30312] __nla_validate_parse: 7 callbacks suppressed [ 220.835228][T30312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11927'. [ 221.366653][T30411] openvswitch: netlink: IP tunnel dst address not specified [ 221.891856][T30508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12019'. [ 221.933722][ T40] audit: type=1326 audit(2000000022.543:63390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30515 comm="syz.2.12030" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 221.940709][ T40] audit: type=1326 audit(2000000022.543:63391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30515 comm="syz.2.12030" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 221.947664][ T40] audit: type=1326 audit(2000000022.543:63392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30515 comm="syz.2.12030" exe="/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 221.954607][ T40] audit: type=1326 audit(2000000022.543:63393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30515 comm="syz.2.12030" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 221.963389][ T40] audit: type=1326 audit(2000000022.543:63394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30515 comm="syz.2.12030" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 222.031468][T30532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12034'. [ 222.176916][T30560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12047'. [ 222.217868][T30566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12051'. [ 222.282931][T30580] qnx6: unable to set blocksize [ 222.449943][T30612] qnx6: unable to set blocksize [ 222.526408][T30631] tc_dump_action: action bad kind [ 222.565359][T30639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12088'. [ 222.654820][T30654] xt_ipcomp: unknown flags 12 [ 222.738304][T30674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12104'. [ 222.880185][T30704] tc_dump_action: action bad kind [ 223.018120][T30735] xt_ipcomp: unknown flags 12 [ 223.078118][T30747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12141'. [ 223.146029][T30767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12151'. [ 223.347476][T30821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.881946][ T40] audit: type=1326 audit(2000000024.357:63395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30934 comm="syz.1.12236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 223.890040][ T40] audit: type=1326 audit(2000000024.357:63396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30934 comm="syz.1.12236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 223.896830][ T40] audit: type=1326 audit(2000000024.357:63397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30934 comm="syz.1.12236" exe="/syz-executor" sig=0 arch=40000003 syscall=151 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 223.907686][ T40] audit: type=1326 audit(2000000024.367:63398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30934 comm="syz.1.12236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 223.971087][T30948] validate_nla: 6 callbacks suppressed [ 223.971099][T30948] netlink: 'syz.2.12237': attribute type 2 has an invalid length. [ 223.980452][T30948] : entered promiscuous mode [ 223.982440][ T7872] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 224.091982][T30967] bridge7: entered promiscuous mode [ 224.153414][ T7872] usb 8-1: Using ep0 maxpacket: 16 [ 224.157367][ T7872] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 224.166052][ T7872] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 224.168898][ T7872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.171413][ T7872] usb 8-1: Product: syz [ 224.172802][ T7872] usb 8-1: Manufacturer: syz [ 224.174282][ T7872] usb 8-1: SerialNumber: syz [ 224.178742][ T7872] usb 8-1: config 0 descriptor?? [ 224.184051][ T7872] hub 8-1:0.0: bad descriptor, ignoring hub [ 224.186422][ T7872] hub 8-1:0.0: probe with driver hub failed with error -5 [ 224.191584][ T7872] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input20 [ 224.194932][ T40] audit: type=1326 audit(2000000024.647:63399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30978 comm="syz.2.12254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 224.383743][T31004] bridge6: entered promiscuous mode [ 224.645496][ T1471] usb 8-1: USB disconnect, device number 13 [ 225.196191][T31018] netlink: 'syz.2.12267': attribute type 8 has an invalid length. [ 225.333729][T31031] openvswitch: netlink: Tunnel attr 294 out of range max 16 [ 225.540123][T31064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12294'. [ 226.321117][T31048] orangefs_mount: mount request failed with -4 [ 226.414156][T31140] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 226.416983][T31140] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 226.458779][T31148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.559523][T31167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.739703][T31202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.938778][T31232] openvswitch: netlink: Unknown key attributes 2 [ 226.965470][T31234] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 226.968275][T31234] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 227.093333][ T6550] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 227.264508][ T6550] usb 5-1: Using ep0 maxpacket: 16 [ 227.267353][ T6550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 227.272154][ T6550] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 227.276085][ T6550] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.279336][ T6550] usb 5-1: Product: syz [ 227.281121][ T6550] usb 5-1: Manufacturer: syz [ 227.283131][ T6550] usb 5-1: SerialNumber: syz [ 227.287607][ T6550] usb 5-1: config 0 descriptor?? [ 227.290965][ T6550] hub 5-1:0.0: bad descriptor, ignoring hub [ 227.293496][ T6550] hub 5-1:0.0: probe with driver hub failed with error -5 [ 227.299280][ T6550] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input21 [ 227.548506][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 227.548516][ T40] audit: type=1400 audit(2000000027.790:63410): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=31239 comm="syz.3.12377" [ 227.999012][T31308] netlink: 'syz.3.12412': attribute type 5 has an invalid length. [ 228.126336][T31330] netlink: 'syz.2.12423': attribute type 5 has an invalid length. [ 228.280466][ T6018] usb 5-1: USB disconnect, device number 11 [ 228.299241][T31366] netlink: 'syz.1.12434': attribute type 5 has an invalid length. [ 228.911742][T31465] binder: 31464:31465 ioctl c018620c 80000000 returned -1 [ 228.956051][T31472] netlink: 'syz.0.12489': attribute type 1 has an invalid length. [ 228.958901][T31472] netlink: 'syz.0.12489': attribute type 1 has an invalid length. [ 229.042844][T31489] __nla_validate_parse: 1 callbacks suppressed [ 229.042861][T31489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12495'. [ 229.087191][T31497] netlink: 'syz.1.12501': attribute type 1 has an invalid length. [ 229.089913][T31497] netlink: 'syz.1.12501': attribute type 1 has an invalid length. [ 229.129791][T31503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12504'. [ 229.142240][T31505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12510'. [ 229.145181][T31505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12510'. [ 229.202097][T31514] IPv6: NLM_F_CREATE should be specified when creating new route [ 229.222987][ T6018] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 229.242445][T31522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.279199][T31525] netlink: 'syz.3.12513': attribute type 1 has an invalid length. [ 229.333426][T31536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12520'. [ 229.381167][ T6018] usb 7-1: Using ep0 maxpacket: 16 [ 229.385433][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 229.396248][ T6018] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 229.399740][ T6018] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.403035][ T6018] usb 7-1: Product: syz [ 229.404590][ T6018] usb 7-1: Manufacturer: syz [ 229.406306][ T6018] usb 7-1: SerialNumber: syz [ 229.414045][ T6018] usb 7-1: config 0 descriptor?? [ 229.419193][ T6018] hub 7-1:0.0: bad descriptor, ignoring hub [ 229.421465][ T6018] hub 7-1:0.0: probe with driver hub failed with error -5 [ 229.426992][ T6018] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input22 [ 229.472507][T31551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12527'. [ 229.507562][T31558] IPv6: NLM_F_CREATE should be specified when creating new route [ 229.575761][T31565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.590972][ C1] sr 2:0:0:0: [sr0] tag#27 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 229.596233][ C1] sr 2:0:0:0: [sr0] tag#27 CDB: opcode=0xe4 (vendor) [ 229.599158][ C1] sr 2:0:0:0: [sr0] tag#27 CDB[00]: e4 50 ab 8b ca 3c c5 d0 de 67 e2 fc 69 8c 8f 18 [ 229.603100][ C1] sr 2:0:0:0: [sr0] tag#27 CDB[10]: 08 0a [ 229.759844][T31582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12540'. [ 229.761527][T31583] mmap: syz.1.12543 (31583): VmData 45764608 exceed data ulimit 32768. Update limits or use boot option ignore_rlimit_data. [ 229.808105][T31591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.884813][ T6018] usb 7-1: USB disconnect, device number 14 [ 229.967915][T31609] syz.0.12559: attempt to access beyond end of device [ 229.967915][T31609] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 229.973692][T31609] syz.0.12559: attempt to access beyond end of device [ 229.973692][T31609] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 229.978241][T31609] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 229.982567][T31609] syz.0.12559: attempt to access beyond end of device [ 229.982567][T31609] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 229.987977][T31609] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 229.991509][T31609] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 229.993909][T31609] UDF-fs: Scanning with blocksize 512 failed [ 229.997574][T31609] syz.0.12559: attempt to access beyond end of device [ 229.997574][T31609] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 230.001941][T31609] syz.0.12559: attempt to access beyond end of device [ 230.001941][T31609] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 230.005994][T31609] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 230.009031][T31609] syz.0.12559: attempt to access beyond end of device [ 230.009031][T31609] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 230.013248][T31609] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 230.016193][T31609] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 230.018566][T31609] UDF-fs: Scanning with blocksize 1024 failed [ 230.020765][T31609] syz.0.12559: attempt to access beyond end of device [ 230.020765][T31609] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 230.025554][T31609] syz.0.12559: attempt to access beyond end of device [ 230.025554][T31609] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 230.029799][T31609] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 230.032984][T31609] syz.0.12559: attempt to access beyond end of device [ 230.032984][T31609] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 230.037327][T31609] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 230.040372][T31609] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 230.042806][T31609] UDF-fs: Scanning with blocksize 2048 failed [ 230.046272][T31609] syz.0.12559: attempt to access beyond end of device [ 230.046272][T31609] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 230.050543][T31609] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 230.053624][T31609] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 230.056834][T31609] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 230.059708][T31609] UDF-fs: Scanning with blocksize 4096 failed [ 230.061904][T31609] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 230.475601][T31621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12554'. [ 230.502864][T31624] validate_nla: 1 callbacks suppressed [ 230.502875][T31624] netlink: 'syz.0.12557': attribute type 1 has an invalid length. [ 230.687429][ T40] audit: type=1326 audit(2000000030.727:63411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31662 comm="syz.1.12577" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 230.704868][ T40] audit: type=1326 audit(2000000030.727:63412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31662 comm="syz.1.12577" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 230.713676][ T40] audit: type=1326 audit(2000000030.727:63413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31662 comm="syz.1.12577" exe="/syz-executor" sig=0 arch=40000003 syscall=323 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 230.724004][ T40] audit: type=1326 audit(2000000030.727:63414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31662 comm="syz.1.12577" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 230.733177][ T40] audit: type=1326 audit(2000000030.727:63415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31662 comm="syz.1.12577" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 230.744472][T31671] gtp1: entered promiscuous mode [ 230.746093][T31671] gtp1: entered allmulticast mode [ 230.852534][ T40] audit: type=1326 audit(2000000030.877:63416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31688 comm="syz.0.12590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 230.861070][ T40] audit: type=1326 audit(2000000030.877:63417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31688 comm="syz.0.12590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 230.868916][ T40] audit: type=1326 audit(2000000030.877:63418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31688 comm="syz.0.12590" exe="/syz-executor" sig=0 arch=40000003 syscall=323 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 230.875673][ T40] audit: type=1326 audit(2000000030.877:63419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31688 comm="syz.0.12590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 230.919572][T31700] gtp2: entered promiscuous mode [ 230.928076][T31700] gtp2: entered allmulticast mode [ 230.990684][T31707] netlink: 'syz.1.12599': attribute type 1 has an invalid length. [ 231.194924][T31725] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 231.198088][T31725] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 231.201498][T31725] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 231.204240][T31725] UDF-fs: Scanning with blocksize 512 failed [ 231.206735][T31725] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 231.210783][T31725] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 231.214526][T31725] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 231.218030][T31725] UDF-fs: Scanning with blocksize 1024 failed [ 231.222539][T31725] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 231.228698][T31725] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 231.233080][T31725] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 231.235783][T31725] UDF-fs: Scanning with blocksize 2048 failed [ 231.238064][T31725] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 231.241144][T31725] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 231.244608][T31725] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 231.246985][T31725] UDF-fs: Scanning with blocksize 4096 failed [ 231.248969][T31725] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 231.296729][T31733] gtp1: entered promiscuous mode [ 231.298391][T31733] gtp1: entered allmulticast mode [ 231.665040][T31795] netlink: 'syz.0.12645': attribute type 1 has an invalid length. [ 231.668537][T31795] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12645'. [ 232.501236][T31907] netlink: 'syz.2.12694': attribute type 1 has an invalid length. [ 232.504957][T31907] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12694'. [ 232.514323][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 232.695211][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 232.709341][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 232.715299][ T9] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 232.718611][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.721379][ T9] usb 6-1: Product: syz [ 232.722985][ T9] usb 6-1: Manufacturer: syz [ 232.729971][ T9] usb 6-1: SerialNumber: syz [ 232.732892][ T9] usb 6-1: config 0 descriptor?? [ 232.739253][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 232.741744][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 232.749862][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input23 [ 232.861367][T31929] netlink: 'syz.2.12705': attribute type 11 has an invalid length. [ 232.948510][T31942] netlink: 'syz.3.12711': attribute type 1 has an invalid length. [ 232.950932][T31942] netlink: 'syz.3.12711': attribute type 2 has an invalid length. [ 232.993260][T31948] netlink: 'syz.2.12714': attribute type 1 has an invalid length. [ 233.227747][T31975] netlink: 'syz.2.12724': attribute type 1 has an invalid length. [ 233.236047][T31975] netlink: 'syz.2.12724': attribute type 2 has an invalid length. [ 233.294007][T31981] netlink: 'syz.3.12726': attribute type 1 has an invalid length. [ 233.358461][ T6056] usb 6-1: USB disconnect, device number 13 [ 233.623525][T31990] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 233.625603][T31990] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 233.628282][T31990] vhci_hcd vhci_hcd.0: Device attached [ 233.817893][ T6550] vhci_hcd: vhci_device speed not set [ 233.892653][ T6550] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 233.904060][T31991] vhci_hcd: connection closed [ 233.904200][ T1245] vhci_hcd: stop threads [ 233.907728][ T1245] vhci_hcd: release socket [ 233.911980][ T1245] vhci_hcd: disconnect device [ 233.975012][T32040] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 234.129760][T32063] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 234.275529][T32080] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 234.277571][ T5851] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 234.459606][ T5851] usb 8-1: Using ep0 maxpacket: 16 [ 234.463660][ T5851] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 234.469697][ T5851] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 234.473760][ T5851] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.476998][ T5851] usb 8-1: Product: syz [ 234.478451][ T5851] usb 8-1: Manufacturer: syz [ 234.479979][ T5851] usb 8-1: SerialNumber: syz [ 234.487297][ T5851] usb 8-1: config 0 descriptor?? [ 234.490326][ T5851] hub 8-1:0.0: bad descriptor, ignoring hub [ 234.492816][ T5851] hub 8-1:0.0: probe with driver hub failed with error -5 [ 234.497581][ T5851] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input24 [ 234.839741][T32134] __nla_validate_parse: 7 callbacks suppressed [ 234.839753][T32134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12802'. [ 234.984381][T32165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12818'. [ 235.436359][T32259] netlink: 348 bytes leftover after parsing attributes in process `syz.0.12865'. [ 235.459437][T32261] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 235.578171][T32282] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12876'. [ 236.257870][T32330] validate_nla: 18 callbacks suppressed [ 236.257887][T32330] netlink: 'syz.1.12899': attribute type 21 has an invalid length. [ 236.263797][T32330] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12899'. [ 236.382767][T32350] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 236.385047][T32350] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 236.389941][T32350] vhci_hcd vhci_hcd.0: Device attached [ 236.576013][ T9] vhci_hcd: vhci_device speed not set [ 236.640081][ T9] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 236.644959][T32351] vhci_hcd: connection closed [ 236.646216][ T1245] vhci_hcd: stop threads [ 236.650357][ T1245] vhci_hcd: release socket [ 236.652421][ T1245] vhci_hcd: disconnect device [ 236.706875][T32380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12923'. [ 237.057484][ T7872] usb 8-1: USB disconnect, device number 14 [ 237.278794][T32414] netlink: 'syz.2.12939': attribute type 1 has an invalid length. [ 237.384246][T32429] macvtap0: entered allmulticast mode [ 237.385993][T32429] veth0_macvtap: entered allmulticast mode [ 237.414704][T32431] libceph: resolve '400' (ret=-3): failed [ 237.421853][T32434] netlink: 'syz.2.12948': attribute type 1 has an invalid length. [ 237.465104][T32440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12951'. [ 237.548231][T32450] netlink: 'syz.1.12956': attribute type 1 has an invalid length. [ 237.677818][T32465] libceph: resolve '400' (ret=-3): failed [ 237.691399][T32469] netlink: 'syz.3.12962': attribute type 1 has an invalid length. [ 237.732080][T32476] macvtap0: entered allmulticast mode [ 237.733885][T32476] veth0_macvtap: entered allmulticast mode [ 237.792228][T32485] netlink: 'syz.2.12973': attribute type 2 has an invalid length. [ 237.794922][T32485] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12973'. [ 237.836681][T32492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12975'. [ 237.925109][T32507] libceph: resolve '400' (ret=-3): failed [ 237.984275][T32509] macvtap0: entered allmulticast mode [ 237.986131][T32509] veth0_macvtap: entered allmulticast mode [ 238.008573][ T6056] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 238.065774][T32523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12989'. [ 238.168878][ T6056] usb 6-1: Using ep0 maxpacket: 16 [ 238.172016][ T6056] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 238.178842][ T6056] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 238.185940][ T6056] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.188673][ T6056] usb 6-1: Product: syz [ 238.194385][ T6056] usb 6-1: Manufacturer: syz [ 238.196062][ T6056] usb 6-1: SerialNumber: syz [ 238.203709][ T6056] usb 6-1: config 0 descriptor?? [ 238.207511][ T6056] hub 6-1:0.0: bad descriptor, ignoring hub [ 238.209620][ T6056] hub 6-1:0.0: probe with driver hub failed with error -5 [ 238.215071][ T6056] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input25 [ 238.259545][T32541] netlink: 'syz.0.12999': attribute type 21 has an invalid length. [ 239.387663][ T6550] vhci_hcd: vhci_device speed not set [ 240.587266][ T6550] usb 6-1: USB disconnect, device number 14 [ 241.236276][T32590] netlink: 'syz.2.13030': attribute type 10 has an invalid length. [ 241.243319][T32590] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13030'. [ 241.246200][T32590] dummy0: entered promiscuous mode [ 241.250049][T32590] bridge0: port 3(dummy0) entered blocking state [ 241.252189][T32590] bridge0: port 3(dummy0) entered disabled state [ 241.254358][T32590] dummy0: entered allmulticast mode [ 241.258230][T32590] bridge0: port 3(dummy0) entered blocking state [ 241.260847][T32590] bridge0: port 3(dummy0) entered forwarding state [ 241.369080][T32614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13034'. [ 241.518405][T32646] netlink: 'syz.2.13050': attribute type 2 has an invalid length. [ 241.521157][T32646] netlink: 'syz.2.13050': attribute type 1 has an invalid length. [ 241.559480][T32655] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 241.680275][T32686] tmpfs: Bad value for 'nr_inodes' [ 241.732507][T32696] No source specified [ 241.888883][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 241.888894][ T40] audit: type=1326 audit(2000000041.204:63425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32736 comm="syz.3.13095" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 241.898132][ T40] audit: type=1326 audit(2000000041.204:63426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32736 comm="syz.3.13095" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 241.907803][ T40] audit: type=1326 audit(2000000041.213:63427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32736 comm="syz.3.13095" exe="/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 241.912222][T32740] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13096'. [ 241.915795][ T40] audit: type=1326 audit(2000000041.213:63428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32736 comm="syz.3.13095" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 241.923054][T32742] SET target dimension over the limit! [ 242.035149][ T40] audit: type=1326 audit(2000000041.344:63429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=300 comm="syz.3.13110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 242.043277][ T40] audit: type=1326 audit(2000000041.344:63430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=300 comm="syz.3.13110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 242.047359][ T303] netlink: zone id is out of range [ 242.050007][ T40] audit: type=1326 audit(2000000041.354:63431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=300 comm="syz.3.13110" exe="/syz-executor" sig=0 arch=40000003 syscall=81 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 242.056323][ T303] netlink: zone id is out of range [ 242.058129][ T40] audit: type=1326 audit(2000000041.354:63432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=300 comm="syz.3.13110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 242.059750][ T303] netlink: zone id is out of range [ 242.059757][ T303] netlink: zone id is out of range [ 242.059761][ T303] netlink: zone id is out of range [ 242.059764][ T303] netlink: zone id is out of range [ 242.059768][ T303] netlink: zone id is out of range [ 242.059772][ T303] netlink: zone id is out of range [ 242.059775][ T303] netlink: zone id is out of range [ 242.080137][ T40] audit: type=1326 audit(2000000041.354:63433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=300 comm="syz.3.13110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 242.091216][ T309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13114'. [ 242.113811][ T9] vhci_hcd: vhci_device speed not set [ 242.273998][ T1471] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 242.293687][ T352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13134'. [ 242.329655][ T360] netlink: 9 bytes leftover after parsing attributes in process `syz.1.13138'. [ 242.332613][ T360] 0: renamed from hsr_slave_1 (while UP) [ 242.335687][ T360] 0: entered allmulticast mode [ 242.458083][ T1471] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 242.460710][ T1471] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 242.463821][ T1471] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 242.468013][ T1471] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 242.471365][ T1471] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 242.474479][ T1471] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 242.485796][ T1471] usb 7-1: string descriptor 0 read error: -22 [ 242.487977][ T1471] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 242.493449][ T1471] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.499035][ T1471] usb 7-1: config 0 descriptor?? [ 242.501549][T32759] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 242.507147][ T1471] hub 7-1:0.0: bad descriptor, ignoring hub [ 242.509101][ T1471] hub 7-1:0.0: probe with driver hub failed with error -5 [ 242.515365][ T1471] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input26 [ 242.736157][ T427] binder: 425:427 ioctl c0306201 800001c0 returned -22 [ 242.946870][ T467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13190'. [ 242.950130][ T467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13190'. [ 243.006381][ T473] delete_channel: no stack [ 243.281816][ T505] xt_CT: No such helper "syz1" [ 243.406553][ T527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13218'. [ 243.411101][ T527] netlink: 'syz.3.13218': attribute type 5 has an invalid length. [ 243.414380][ T527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13218'. [ 243.425248][ T527] netdevsim netdevsim3 : set [1, 1] type 2 family 0 port 256 - 0 [ 243.428451][ T527] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 243.433180][ T527] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 243.436592][ T527] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 243.439723][ T527] geneve2: entered promiscuous mode [ 243.441914][ T527] geneve2: entered allmulticast mode [ 243.493645][ T536] Zero length message leads to an empty skb [ 243.752462][ T585] netlink: 'syz.1.13248': attribute type 32 has an invalid length. [ 243.755022][ T585] netlink: 'syz.1.13248': attribute type 32 has an invalid length. [ 243.811795][ T598] unsupported nlmsg_type 40 [ 243.939306][ T619] 9pnet_fd: p9_fd_create_unix (619): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 244.024554][ T54] usb 7-1: USB disconnect, device number 15 [ 244.024621][ C1] usb_acecad 7-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -19 [ 244.057663][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.106631][ T643] 9pnet_fd: p9_fd_create_unix (643): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 244.137995][ T648] netlink: 'syz.0.13274': attribute type 32 has an invalid length. [ 244.170051][ T648] netlink: 'syz.0.13274': attribute type 32 has an invalid length. [ 244.438962][ T696] netlink: 'syz.3.13297': attribute type 32 has an invalid length. [ 244.441584][ T696] netlink: 'syz.3.13297': attribute type 32 has an invalid length. [ 244.602387][ T716] xt_CT: No such helper "syz1" [ 244.868650][ T774] binder: 773:774 ioctl c0306201 800001c0 returned -22 [ 245.377680][ T880] 0: renamed from hsr_slave_1 (while UP) [ 245.381170][ T880] 0: entered allmulticast mode [ 245.820869][ T40] audit: type=1326 audit(2000000044.880:63434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=991 comm="syz.2.13431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 245.866757][ T1001] SET target dimension over the limit! [ 245.899012][ T1471] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 245.989037][ T1028] SET target dimension over the limit! [ 246.071772][ T1471] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 246.074415][ T1471] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 246.082100][ T1471] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 246.084897][ T1471] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 246.088240][ T1471] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 246.091993][ T1471] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 246.098374][ T1471] usb 6-1: string descriptor 0 read error: -22 [ 246.100384][ T1471] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 246.103428][ T1054] No source specified [ 246.105236][ T1471] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.109601][ T1471] usb 6-1: config 0 descriptor?? [ 246.111664][ T943] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 246.119234][ T1471] hub 6-1:0.0: bad descriptor, ignoring hub [ 246.121401][ T1471] hub 6-1:0.0: probe with driver hub failed with error -5 [ 246.125762][ T1471] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input27 [ 246.271978][ T1081] tmpfs: Bad value for 'nr_inodes' [ 246.418867][ T5851] usb 6-1: USB disconnect, device number 15 [ 246.444850][ T1116] tmpfs: Bad value for 'nr_inodes' [ 247.027676][ T1162] tmpfs: Bad value for 'nr_inodes' [ 247.078196][ T1172] netlink: 'syz.0.13506': attribute type 2 has an invalid length. [ 247.080689][ T1172] netlink: 'syz.0.13506': attribute type 1 has an invalid length. [ 247.140617][ T1177] net_ratelimit: 345 callbacks suppressed [ 247.140630][ T1177] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 247.232785][ T1198] netlink: 'syz.1.13512': attribute type 2 has an invalid length. [ 247.256049][ T9] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 247.261569][ T1202] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 247.316816][ T1214] __nla_validate_parse: 9 callbacks suppressed [ 247.316828][ T1214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13522'. [ 247.367454][ T1224] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13525'. [ 247.370429][ T1224] dummy0: entered promiscuous mode [ 247.372394][ T1224] bridge0: port 3(dummy0) entered blocking state [ 247.375435][ T1224] bridge0: port 3(dummy0) entered disabled state [ 247.377577][ T1224] dummy0: entered allmulticast mode [ 247.380225][ T1224] bridge0: port 3(dummy0) entered blocking state [ 247.382379][ T1224] bridge0: port 3(dummy0) entered forwarding state [ 247.428183][ T9] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 247.430839][ T9] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 247.433372][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 247.436150][ T9] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 247.440646][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 247.443756][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 247.450134][ T9] usb 8-1: string descriptor 0 read error: -22 [ 247.452402][ T9] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 247.455447][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.460031][ T9] usb 8-1: config 0 descriptor?? [ 247.462216][ T1151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 247.467232][ T9] hub 8-1:0.0: bad descriptor, ignoring hub [ 247.469116][ T9] hub 8-1:0.0: probe with driver hub failed with error -5 [ 247.480383][ T9] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input28 [ 247.481029][ T1242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13534'. [ 247.532872][ T1253] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13537'. [ 247.538418][ T1253] dummy0: entered promiscuous mode [ 247.540582][ T1253] bridge0: port 3(dummy0) entered blocking state [ 247.542687][ T1253] bridge0: port 3(dummy0) entered disabled state [ 247.545293][ T1253] dummy0: entered allmulticast mode [ 247.548714][ T1253] bridge0: port 3(dummy0) entered blocking state [ 247.550807][ T1253] bridge0: port 3(dummy0) entered forwarding state [ 247.751839][ T6550] usb 8-1: USB disconnect, device number 15 [ 248.321466][ T1289] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13553'. [ 248.326384][ T1289] dummy0: entered promiscuous mode [ 248.329329][ T1289] bridge0: port 3(dummy0) entered blocking state [ 248.332068][ T1289] bridge0: port 3(dummy0) entered disabled state [ 248.334162][ T1289] dummy0: entered allmulticast mode [ 248.341155][ T1289] bridge0: port 3(dummy0) entered blocking state [ 248.343809][ T1289] bridge0: port 3(dummy0) entered forwarding state [ 248.460748][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 248.460758][ T40] audit: type=1326 audit(2000000047.349:63443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1320 comm="syz.3.13573" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 248.472321][ T40] audit: type=1326 audit(2000000047.349:63444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1320 comm="syz.3.13573" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 248.480399][ T40] audit: type=1326 audit(2000000047.349:63445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1320 comm="syz.3.13573" exe="/syz-executor" sig=0 arch=40000003 syscall=36 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 248.495958][ T40] audit: type=1326 audit(2000000047.378:63446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1320 comm="syz.3.13573" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 248.516097][ T40] audit: type=1326 audit(2000000047.378:63447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1320 comm="syz.3.13573" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 248.540609][ T1340] 9p: Unknown Cache mode or invalid value fscach [ 248.669036][ T40] audit: type=1326 audit(2000000047.546:63448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1369 comm="syz.1.13596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 248.675784][ T40] audit: type=1326 audit(2000000047.546:63449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1369 comm="syz.1.13596" exe="/syz-executor" sig=0 arch=40000003 syscall=36 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 248.684488][ T40] audit: type=1326 audit(2000000047.565:63450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1369 comm="syz.1.13596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 248.692850][ T40] audit: type=1326 audit(2000000047.565:63451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1369 comm="syz.1.13596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 248.833060][ T1410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13615'. [ 248.917536][ T1433] 9p: Unknown Cache mode or invalid value fscach [ 248.922604][ T40] audit: type=1326 audit(2000000047.780:63452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1434 comm="syz.3.13626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 249.096378][ T1482] program syz.3.13649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.413373][ T1561] validate_nla: 5 callbacks suppressed [ 249.413384][ T1561] netlink: 'syz.1.13688': attribute type 3 has an invalid length. [ 249.438678][ T1563] lo: left promiscuous mode [ 249.440266][ T1563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.526940][ T1584] BIDI support in bsg has been removed. [ 249.571942][ T1593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13704'. [ 249.630624][ T1609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13712'. [ 249.690131][ T1621] (unnamed net_device) (uninitialized): peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 249.700436][ T1623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13719'. [ 249.805461][ T1646] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13730'. [ 249.884091][ T1661] tmpfs: Bad value for 'mpol' [ 250.359274][ T1726] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 250.411472][ T1738] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 250.478250][ T1753] ALSA: mixer_oss: invalid OSS volume 'u' [ 250.528856][ T1766] random: crng reseeded on system resumption [ 250.534585][ T1766] Hibernate inconsistent memory map detected! [ 250.537413][ T1766] PM: hibernation: Image mismatch: architecture specific data [ 250.682036][ T1800] netlink: 'syz.2.13806': attribute type 1 has an invalid length. [ 250.770897][ T1822] cgroup: subsys name conflicts with all [ 250.780164][ T1824] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 250.792829][ T1824] bond5: entered allmulticast mode [ 250.795964][ T1824] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.848035][ T1843] macvlan1: entered promiscuous mode [ 250.849753][ T1843] macvlan1: entered allmulticast mode [ 250.893345][ T1855] netlink: 'syz.1.13833': attribute type 1 has an invalid length. [ 250.897033][ T1855] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 251.030862][ T1886] PM: Enabling pm_trace changes system date and time during resume. [ 251.030862][ T1886] PM: Correct system time has to be restored manually after resume. [ 251.102247][ T1904] bond0: option ad_select: unable to set because the bond device is up [ 251.143976][ T1918] openvswitch: netlink: IP tunnel dst address not specified [ 251.192549][ T1931] program syz.1.13871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.281427][ T1954] program syz.0.13882 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.328473][ T1966] bio_check_eod: 14 callbacks suppressed [ 251.328484][ T1966] syz.2.13888: attempt to access beyond end of device [ 251.328484][ T1966] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 251.334440][ T1966] syz.2.13888: attempt to access beyond end of device [ 251.334440][ T1966] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 251.444897][ T1992] bond0: option ad_select: unable to set because the bond device is up [ 251.589305][ T2026] macvlan1: entered promiscuous mode [ 251.591055][ T2026] macvlan1: entered allmulticast mode [ 251.661843][ T2044] cgroup: subsys name conflicts with all [ 251.701581][ T2057] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 251.724129][ T2057] bond6: entered allmulticast mode [ 251.726073][ T2057] 8021q: adding VLAN 0 to HW filter on device bond6 [ 251.765555][ T2073] netlink: 'syz.1.13939': attribute type 1 has an invalid length. [ 251.889495][ T2102] netlink: 'syz.0.13954': attribute type 1 has an invalid length. [ 251.947092][ T2116] random: crng reseeded on system resumption [ 251.948113][ T2115] IPv6: Can't replace route, no match found [ 251.957514][ T2116] Hibernate inconsistent memory map detected! [ 251.960381][ T2116] PM: hibernation: Image mismatch: architecture specific data [ 252.116402][ T2145] ALSA: mixer_oss: invalid OSS volume 'u' [ 252.122638][ T2149] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 252.152885][ T2158] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 252.340544][ T2203] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 252.611659][ T2259] tmpfs: Bad value for 'mpol' [ 252.679213][ T2274] __nla_validate_parse: 8 callbacks suppressed [ 252.679224][ T2274] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14040'. [ 252.716602][ T2287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14045'. [ 252.781878][ T2303] (unnamed net_device) (uninitialized): peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 252.853656][ T2316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14059'. [ 252.918613][ T2331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14065'. [ 252.943006][ T2336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14068'. [ 253.096669][ T2368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14084'. [ 253.246612][ T2402] (unnamed net_device) (uninitialized): peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 253.277746][ T2406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14101'. [ 253.355891][ T2423] tmpfs: Bad value for 'mpol' [ 253.505263][ T2443] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 253.713497][ T2468] netlink: 272 bytes leftover after parsing attributes in process `syz.3.14141'. [ 253.716938][ T2468] macvlan1: entered promiscuous mode [ 253.718659][ T2468] macvlan1: entered allmulticast mode [ 254.880523][ T2538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14169'. [ 254.926188][ T2552] netlink: 'syz.1.14176': attribute type 12 has an invalid length. [ 254.928714][ T2552] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14176'. [ 255.110058][ T2610] netlink: 'syz.2.14197': attribute type 12 has an invalid length. [ 255.255556][ T2648] netlink: 'syz.0.14211': attribute type 12 has an invalid length. [ 255.338891][ T2666] bond7: entered promiscuous mode [ 255.340756][ T2666] 8021q: adding VLAN 0 to HW filter on device bond7 [ 255.369089][ T2679] netlink: 'syz.3.14225': attribute type 12 has an invalid length. [ 255.501846][ T2708] bond6: entered promiscuous mode [ 255.503849][ T2708] 8021q: adding VLAN 0 to HW filter on device bond6 [ 255.662364][ T2747] bond7: entered promiscuous mode [ 255.664275][ T2753] netlink: 'syz.2.14252': attribute type 21 has an invalid length. [ 255.664300][ T2747] 8021q: adding VLAN 0 to HW filter on device bond7 [ 255.671631][ T2753] netlink: 'syz.2.14252': attribute type 1 has an invalid length. [ 255.831511][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 255.831522][ T40] audit: type=1326 audit(2000000054.253:63466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2785 comm="syz.0.14267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 255.840950][ T40] audit: type=1326 audit(2000000054.253:63467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2785 comm="syz.0.14267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 255.848655][ T40] audit: type=1326 audit(2000000054.253:63468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2785 comm="syz.0.14267" exe="/syz-executor" sig=0 arch=40000003 syscall=243 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 255.858433][ T40] audit: type=1326 audit(2000000054.253:63469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2785 comm="syz.0.14267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 255.868060][ T40] audit: type=1326 audit(2000000054.253:63470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2785 comm="syz.0.14267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 255.873949][ T2791] netlink: 'syz.3.14269': attribute type 11 has an invalid length. [ 255.878911][ T2791] netlink: 'syz.3.14269': attribute type 4 has an invalid length. [ 255.976452][ T2819] ksmbd: Unknown IPC event: 3, ignore. [ 256.089869][ T2849] xt_TPROXY: Can be used only with -p tcp or -p udp [ 256.223414][ T2885] .: renamed from bond0 (while UP) [ 256.389265][ T2935] xt_TPROXY: Can be used only with -p tcp or -p udp [ 256.506875][ T2968] xt_TPROXY: Can be used only with -p tcp or -p udp [ 256.639375][ T3011] ksmbd: Unknown IPC event: 3, ignore. [ 256.790683][ T3047] netlink: 'syz.2.14371': attribute type 11 has an invalid length. [ 256.794199][ T3047] netlink: 'syz.2.14371': attribute type 4 has an invalid length. [ 256.913193][ T3074] ksmbd: Unknown IPC event: 3, ignore. [ 256.926363][ T40] audit: type=1326 audit(2000000055.272:63471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3079 comm="syz.2.14383" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 256.933933][ T40] audit: type=1326 audit(2000000055.272:63472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3079 comm="syz.2.14383" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 256.940684][ T40] audit: type=1326 audit(2000000055.272:63473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3079 comm="syz.2.14383" exe="/syz-executor" sig=0 arch=40000003 syscall=243 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 256.948882][ T40] audit: type=1326 audit(2000000055.272:63474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3079 comm="syz.2.14383" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 256.958145][ T40] audit: type=1326 audit(2000000055.272:63475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3079 comm="syz.2.14383" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 256.968643][ T3089] netlink: 'syz.0.14391': attribute type 21 has an invalid length. [ 256.971671][ T3089] netlink: 'syz.0.14391': attribute type 1 has an invalid length. [ 257.236746][ T3155] .: renamed from bond0 (while UP) [ 257.585751][ T3242] nftables ruleset with unbound chain [ 257.791385][ T3295] cgroup: none used incorrectly [ 257.916351][ T3329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.025441][ T3356] cgroup: none used incorrectly [ 258.162743][ T3389] cgroup: none used incorrectly [ 258.189519][ T3397] unsupported nla_type 256 [ 258.323663][ T3436] __nla_validate_parse: 19 callbacks suppressed [ 258.323675][ T3436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14561'. [ 258.333743][ T3439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14563'. [ 258.335257][ T3440] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14562'. [ 258.430925][ T3466] sit0: entered promiscuous mode [ 258.441827][ T3466] netlink: 1 bytes leftover after parsing attributes in process `syz.1.14576'. [ 258.526724][ T3495] overlayfs: failed to resolve './file0': -2 [ 258.560763][ T3505] netlink: 196 bytes leftover after parsing attributes in process `syz.1.14594'. [ 258.610488][ T3513] openvswitch: netlink: Message has 4 unknown bytes. [ 258.613281][ T3513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.827857][ T3567] netlink: 196 bytes leftover after parsing attributes in process `syz.2.14620'. [ 259.047576][ T3627] sit0: entered promiscuous mode [ 259.055899][ T3627] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14648'. [ 259.200132][ T3658] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14663'. [ 259.269687][ T3673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14672'. [ 259.299385][ T3677] overlayfs: failed to resolve './file0': -2 [ 259.318531][ T3682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14675'. [ 259.414533][ T3705] overlayfs: failed to resolve './file0': -2 [ 259.545510][ T3733] overlayfs: failed to resolve './file0': -2 [ 259.675912][ T3762] openvswitch: netlink: Message has 4 unknown bytes. [ 259.678313][ T3762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.068061][ T3843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 260.419709][ T3915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 260.452026][ T3922] validate_nla: 8 callbacks suppressed [ 260.452040][ T3922] netlink: 'syz.3.14788': attribute type 39 has an invalid length. [ 260.744962][ T3949] netlink: 'syz.2.14798': attribute type 1 has an invalid length. [ 260.783555][ T3953] xt_CT: You must specify a L4 protocol and not use inversions on it [ 261.152923][ T4022] netlink: 'syz.0.14837': attribute type 1 has an invalid length. [ 261.237348][ T4039] netlink: 'syz.0.14844': attribute type 39 has an invalid length. [ 261.907206][ T4160] netlink: 'syz.1.14906': attribute type 2 has an invalid length. [ 262.199134][ T4222] netlink: 'syz.3.14937': attribute type 10 has an invalid length. [ 262.388754][ T4260] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 262.394922][ T4258] block device autoloading is deprecated and will be removed. [ 262.531941][ T4299] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 262.536102][ T4300] new mount options do not match the existing superblock, will be ignored [ 262.680763][ T4334] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 262.734988][ T4342] new mount options do not match the existing superblock, will be ignored [ 263.601490][ T4375] xt_socket: unknown flags 0x46 [ 263.655084][ T4388] netlink: 'syz.3.15019': attribute type 3 has an invalid length. [ 263.745693][ T4406] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 263.830861][ T4427] ip6tnl1: entered promiscuous mode [ 263.832711][ T4427] ip6tnl1: entered allmulticast mode [ 263.838607][ T4408] /dev/sr0: Can't open blockdev [ 263.955592][ T4422] /dev/sr0: Can't open blockdev [ 264.174339][ T4510] ip6tnl1: entered promiscuous mode [ 264.176028][ T4510] ip6tnl1: entered allmulticast mode [ 264.270181][ T4532] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 264.330683][ T4548] netlink: 'syz.0.15098': attribute type 3 has an invalid length. [ 264.333375][ T4548] __nla_validate_parse: 18 callbacks suppressed [ 264.333383][ T4548] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.15098'. [ 264.415774][ T4565] xt_socket: unknown flags 0x46 [ 264.571526][ T4591] netlink: 'syz.1.15120': attribute type 2 has an invalid length. [ 264.574075][ T4591] netlink: 'syz.1.15120': attribute type 1 has an invalid length. [ 264.595440][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 264.595450][ T40] audit: type=1326 audit(2000000062.437:63481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.0.15121" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 264.605331][ T40] audit: type=1326 audit(2000000062.437:63482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.0.15121" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 264.612239][ T40] audit: type=1326 audit(2000000062.447:63483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.0.15121" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 264.619568][ T40] audit: type=1326 audit(2000000062.447:63484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.0.15121" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 264.626497][ T40] audit: type=1326 audit(2000000062.447:63485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.0.15121" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 264.639430][ T40] audit: type=1326 audit(2000000062.447:63486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.0.15121" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 264.645924][ T40] audit: type=1326 audit(2000000062.447:63487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.0.15121" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 264.714877][ T40] audit: type=1326 audit(2000000062.559:63488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.0.15121" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 264.727926][ T4620] vti0: entered promiscuous mode [ 264.789215][ T40] audit: type=1326 audit(2000000062.634:63489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.0.15121" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 264.838635][ T4642] SET target dimension over the limit! [ 264.852727][ T6550] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 264.855796][ T40] audit: type=1326 audit(2000000062.690:63490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.0.15121" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 264.890953][ T4651] vti0: entered promiscuous mode [ 264.952009][ T4665] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 264.952287][ T4666] SET target dimension over the limit! [ 265.001283][ T4674] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15160'. [ 265.004454][ T4674] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 265.013093][ T6550] usb 5-1: Using ep0 maxpacket: 16 [ 265.020624][ T6550] usb 5-1: unable to get BOS descriptor or descriptor too short [ 265.043335][ T6550] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.047688][ T6550] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.051086][ T6550] usb 5-1: Product: syz [ 265.052797][ T6550] usb 5-1: Manufacturer: syz [ 265.054745][ T6550] usb 5-1: SerialNumber: syz [ 265.078430][ T4688] ata1.00: non-matching transfer count (1530558389/0) [ 265.201103][ T4710] ata1.00: non-matching transfer count (1530558389/0) [ 265.207617][ T4712] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 265.303016][ T6550] cdc_ncm 5-1:1.0: bind() failure [ 265.306933][ T6550] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 265.309287][ T6550] cdc_ncm 5-1:1.1: bind() failure [ 265.313408][ T6550] usb 5-1: USB disconnect, device number 12 [ 265.332204][ T4734] ata1.00: non-matching transfer count (1530558389/0) [ 265.510345][ T4768] snd_dummy snd_dummy.0: control 1:0:0:syz0:-3 is already present [ 265.588342][ T4776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15219'. [ 265.591686][ T4776] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 265.638972][ T4779] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15220'. [ 265.644346][ T4783] snd_dummy snd_dummy.0: control 1:0:0:syz0:-3 is already present [ 265.914056][ T4795] ipt_REJECT: ECHOREPLY no longer supported. [ 265.936528][ T4799] nftables ruleset with unbound set [ 266.160595][ T4851] ipt_REJECT: ECHOREPLY no longer supported. [ 266.188451][ T4858] overlayfs: conflicting options: userxattr,redirect_dir=on [ 266.224794][ T4867] validate_nla: 3 callbacks suppressed [ 266.224805][ T4867] netlink: 'syz.1.15256': attribute type 21 has an invalid length. [ 266.229128][ T4867] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.402011][ T4899] netlink: 'syz.3.15271': attribute type 21 has an invalid length. [ 266.405219][ T4899] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.495228][ T4923] netlink: 'syz.0.15285': attribute type 21 has an invalid length. [ 266.497773][ T4923] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.573329][ T4935] JFS: charset not found [ 266.604184][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15297'. [ 266.655949][ T4962] netlink: 72 bytes leftover after parsing attributes in process `syz.0.15304'. [ 266.658917][ T4962] netlink: 72 bytes leftover after parsing attributes in process `syz.0.15304'. [ 266.705553][ T4972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15309'. [ 266.750162][ T4982] overlayfs: conflicting options: userxattr,redirect_dir=on [ 266.901771][ T5015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15330'. [ 267.014727][ T5028] JFS: charset not found [ 267.100095][ T5047] JFS: charset not found [ 267.193488][ T5064] netlink: 72 bytes leftover after parsing attributes in process `syz.2.15351'. [ 267.603172][ T5156] i2c i2c-1: Invalid block write size 34 [ 267.876081][ T5224] i2c i2c-1: Invalid block write size 34 [ 267.971410][ T5250] i2c i2c-1: Invalid block write size 34 [ 268.453128][ T5354] openvswitch: netlink: Missing valid actions attribute. [ 268.455617][ T5354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.621977][ T5375] netlink: 'syz.0.15503': attribute type 1 has an invalid length. [ 268.735380][ T5400] netlink: 'syz.3.15514': attribute type 10 has an invalid length. [ 268.742277][ T5400] team0: Port device wlan1 added [ 268.794769][ T5406] openvswitch: netlink: Missing valid actions attribute. [ 268.796957][ T5406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.867571][ T5416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.883040][ T54] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 268.924601][ T5425] netlink: 'syz.3.15526': attribute type 1 has an invalid length. [ 269.036154][ T5442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.044560][ T54] usb 6-1: Using ep0 maxpacket: 16 [ 269.049074][ T54] usb 6-1: unable to get BOS descriptor or descriptor too short [ 269.055600][ T54] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.059260][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.061933][ T54] usb 6-1: Product: syz [ 269.063357][ T54] usb 6-1: Manufacturer: syz [ 269.066384][ T54] usb 6-1: SerialNumber: syz [ 269.079364][ T5446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.139198][ T5452] netlink: 'syz.2.15539': attribute type 1 has an invalid length. [ 269.209622][ T5461] netlink: 'syz.2.15541': attribute type 10 has an invalid length. [ 269.212475][ T5461] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 269.218014][ T5461] team0: Port device wlan1 added [ 269.302209][ T54] cdc_ncm 6-1:1.0: bind() failure [ 269.305796][ T54] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 269.308109][ T54] cdc_ncm 6-1:1.1: bind() failure [ 269.313545][ T54] usb 6-1: USB disconnect, device number 16 [ 269.384997][ T5487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.089409][ T5607] __nla_validate_parse: 11 callbacks suppressed [ 270.089421][ T5607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15617'. [ 270.095608][ T5607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15617'. [ 270.163541][ T5627] netlink: 'syz.0.15627': attribute type 1 has an invalid length. [ 270.167415][ T5627] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15627'. [ 270.193725][ T5632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15630'. [ 270.196650][ T5632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15630'. [ 270.560002][ T5701] netlink: 100 bytes leftover after parsing attributes in process `syz.2.15661'. [ 270.563931][ T5701] netlink: 100 bytes leftover after parsing attributes in process `syz.2.15661'. [ 270.577729][ T5703] netlink: 'syz.0.15662': attribute type 1 has an invalid length. [ 270.580319][ T5703] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15662'. [ 270.610200][ T5710] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15665'. [ 270.673764][ T5723] QAT: Device 253 not found [ 270.820539][ T5755] QAT: Device 253 not found [ 270.951276][ T5777] netlink: 100 bytes leftover after parsing attributes in process `syz.3.15695'. [ 270.977800][ T5783] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 270.980000][ T5783] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 270.983555][ T5783] vhci_hcd vhci_hcd.0: Device attached [ 270.988784][ T5784] vhci_hcd: cannot find a urb of seqnum 941 max seqnum 0 [ 270.992182][ T13] vhci_hcd: stop threads [ 270.993519][ T13] vhci_hcd: release socket [ 270.994925][ T13] vhci_hcd: disconnect device [ 271.031776][ T5789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.200272][ T40] kauditd_printk_skb: 85 callbacks suppressed [ 271.200283][ T40] audit: type=1326 audit(2000000068.620:63576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.2.15712" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 271.210938][ T40] audit: type=1326 audit(2000000068.620:63577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.2.15712" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 271.219741][ T40] audit: type=1326 audit(2000000068.620:63578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.2.15712" exe="/syz-executor" sig=0 arch=40000003 syscall=29 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 271.410074][ T5843] sit0: left promiscuous mode [ 271.429429][ T5843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.720067][ T5887] validate_nla: 3 callbacks suppressed [ 271.720079][ T5887] netlink: 'syz.1.15746': attribute type 1 has an invalid length. [ 271.756115][ T5895] syz.1.15749: attempt to access beyond end of device [ 271.756115][ T5895] loop1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 271.763435][ T5895] gfs2: error -5 reading superblock [ 271.885287][ T5917] syz.3.15760: attempt to access beyond end of device [ 271.885287][ T5917] loop3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 271.892057][ T5917] gfs2: error -5 reading superblock [ 271.941210][ T5928] NILFS (nbd0): device size too small [ 272.186369][ T40] audit: type=1326 audit(2000000069.537:63579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.3.15793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 272.193171][ T40] audit: type=1326 audit(2000000069.537:63580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.3.15793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 272.201766][ T40] audit: type=1326 audit(2000000069.546:63581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.3.15793" exe="/syz-executor" sig=0 arch=40000003 syscall=29 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 272.217194][ T6057] syz.2.15797: attempt to access beyond end of device [ 272.217194][ T6057] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 272.221302][ T6057] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 272.292738][ T6070] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 272.295515][ T6070] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 272.301217][ T6070] vhci_hcd vhci_hcd.0: Device attached [ 272.306929][ T6072] vhci_hcd: cannot find a urb of seqnum 941 max seqnum 1 [ 272.310126][ T226] vhci_hcd: stop threads [ 272.311552][ T226] vhci_hcd: release socket [ 272.312983][ T226] vhci_hcd: disconnect device [ 272.451009][ T6089] NILFS (nbd1): device size too small [ 273.008168][ T6121] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 273.010291][ T6121] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 273.014759][ T6121] vhci_hcd vhci_hcd.0: Device attached [ 273.019293][ T6122] vhci_hcd: cannot find a urb of seqnum 941 max seqnum 1 [ 273.023484][ T1236] vhci_hcd: stop threads [ 273.025220][ T1236] vhci_hcd: release socket [ 273.026661][ T1236] vhci_hcd: disconnect device [ 273.098906][ T40] audit: type=1326 audit(2000000070.398:63582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.1.15840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 273.106780][ T40] audit: type=1326 audit(2000000070.398:63583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.1.15840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 273.113418][ T40] audit: type=1326 audit(2000000070.407:63584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.1.15840" exe="/syz-executor" sig=0 arch=40000003 syscall=29 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 273.162745][ T6141] netlink: 'syz.0.15834': attribute type 4 has an invalid length. [ 273.258028][ T6155] overlayfs: empty lowerdir [ 273.640348][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 273.675287][ T6201] netlink: 'syz.3.15865': attribute type 4 has an invalid length. [ 273.826602][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 273.832692][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.835275][ T9] usb 5-1: Product: syz [ 273.836681][ T9] usb 5-1: Manufacturer: syz [ 273.838275][ T9] usb 5-1: SerialNumber: syz [ 273.849121][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 273.872927][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 274.132094][ T7872] usb 5-1: USB disconnect, device number 13 [ 274.390072][ T6277] xt_connbytes: Forcing CT accounting to be enabled [ 274.392592][ T6280] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 274.394691][ T6280] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 274.397932][ T6280] vhci_hcd vhci_hcd.0: Device attached [ 274.404786][ T6281] vhci_hcd: cannot find a urb of seqnum 941 max seqnum 0 [ 274.407268][ T1236] vhci_hcd: stop threads [ 274.408648][ T1236] vhci_hcd: release socket [ 274.410376][ T1236] vhci_hcd: disconnect device [ 274.585725][ T6309] random: crng reseeded on system resumption [ 274.586525][ T6308] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 274.850921][ T6337] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 274.877817][ T6343] random: crng reseeded on system resumption [ 274.965904][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 274.968178][ T9] ath9k_htc: Failed to initialize the device [ 274.970285][ T7872] usb 5-1: ath9k_htc: USB layer deinitialized [ 275.038060][ T6366] random: crng reseeded on system resumption [ 275.080029][ T6371] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 275.082805][ T6375] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 275.083001][ T6371] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 275.089709][ T6371] vhci_hcd vhci_hcd.0: Device attached [ 275.100038][ T6372] vhci_hcd: cannot find a urb of seqnum 941 max seqnum 0 [ 275.102426][ T13] vhci_hcd: stop threads [ 275.103802][ T13] vhci_hcd: release socket [ 275.105486][ T13] vhci_hcd: disconnect device [ 275.162671][ T6388] xt_TCPMSS: Only works on TCP SYN packets [ 275.279344][ T6410] xt_TCPMSS: Only works on TCP SYN packets [ 275.395306][ T6435] xt_TCPMSS: Only works on TCP SYN packets [ 275.538943][ T6466] Cannot find add_set index 0 as target [ 275.664924][ T5312] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 275.683285][ T6498] program syz.2.16010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.757570][ C0] sd 0:0:0:0: [sda] tag#8 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 275.760769][ C0] sd 0:0:0:0: [sda] tag#8 CDB: Test Unit Ready [ 275.794284][ T6512] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 275.796192][ T6512] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 275.801882][ T6512] vhci_hcd vhci_hcd.0: Device attached [ 275.805817][ T6513] vhci_hcd: cannot find a urb of seqnum 941 max seqnum 0 [ 275.808292][ T226] vhci_hcd: stop threads [ 275.809722][ T226] vhci_hcd: release socket [ 275.811287][ T226] vhci_hcd: disconnect device [ 275.858658][ C3] ata1: illegal qc_active transition (00000000->00020000) [ 275.888669][ T6528] __nla_validate_parse: 11 callbacks suppressed [ 275.888681][ T6528] netlink: 830 bytes leftover after parsing attributes in process `syz.2.16024'. [ 275.891326][ T6531] netlink: 260 bytes leftover after parsing attributes in process `syz.0.16026'. [ 275.893624][ T6528] : entered promiscuous mode [ 275.899197][ T6528] bond_slave_1: entered promiscuous mode [ 276.197406][ T1107] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 276.200343][ T1107] ata1.00: configured for UDMA/100 [ 276.232662][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16052'. [ 276.280944][ T54] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 276.445692][ T54] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 276.449222][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.452706][ T54] usb 7-1: Product: syz [ 276.454365][ T54] usb 7-1: Manufacturer: syz [ 276.456159][ T54] usb 7-1: SerialNumber: syz [ 276.464695][ T54] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 276.483321][ T54] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 276.715250][ T7872] usb 7-1: USB disconnect, device number 16 [ 276.829658][ T6663] SET target dimension over the limit! [ 276.979172][ T5312] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 277.037018][ T6697] netlink: 260 bytes leftover after parsing attributes in process `syz.3.16114'. [ 277.080617][ T6705] netlink: 830 bytes leftover after parsing attributes in process `syz.1.16117'. [ 277.083943][ T6705] bond_slave_0: entered promiscuous mode [ 277.086685][ T6705] bond_slave_1: entered promiscuous mode [ 277.088788][ T6705] batadv0: entered promiscuous mode [ 277.151018][ T6711] program syz.1.16112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.228174][ T5312] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 277.379709][ T6741] program syz.3.16128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.575297][ T6778] IPv6: Can't replace route, no match found [ 277.617227][ T54] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 277.623060][ T54] ath9k_htc: Failed to initialize the device [ 277.625250][ T7872] usb 7-1: ath9k_htc: USB layer deinitialized [ 277.646081][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16157'. [ 277.681504][ C3] ata1: illegal qc_active transition (00000000->01000000) [ 277.815162][ T6829] ufs: failed to set blocksize [ 277.818228][ T6830] IPv6: Can't replace route, no match found [ 277.826770][ T40] audit: type=1326 audit(2000000074.822:63585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6831 comm="syz.3.16174" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 277.836564][ T40] audit: type=1326 audit(2000000074.822:63586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6831 comm="syz.3.16174" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 277.851155][ T40] audit: type=1326 audit(2000000074.831:63587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6831 comm="syz.3.16174" exe="/syz-executor" sig=0 arch=40000003 syscall=342 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 277.859014][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16177'. [ 277.862151][ T40] audit: type=1326 audit(2000000074.831:63588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6831 comm="syz.3.16174" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 277.871587][ T40] audit: type=1326 audit(2000000074.831:63589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6831 comm="syz.3.16174" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 278.028181][ T1107] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 278.033448][ T1107] ata1.00: configured for UDMA/100 [ 278.134637][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16210'. [ 278.208408][ T6925] ufs: failed to set blocksize [ 278.254966][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16225'. [ 278.261487][ T6937] block device autoloading is deprecated and will be removed. [ 278.265121][ T6937] syz.0.16224: attempt to access beyond end of device [ 278.265121][ T6937] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 278.319361][ T6949] netlink: 'syz.1.16230': attribute type 28 has an invalid length. [ 278.490842][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16249'. [ 278.532438][ T6997] netlink: 'syz.2.16255': attribute type 28 has an invalid length. [ 278.689769][ T7021] xt_CT: No such helper "snmp_trap" [ 278.699405][ T7026] netlink: 'syz.0.16267': attribute type 28 has an invalid length. [ 278.830603][ T7058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.931118][ T7076] xt_CT: No such helper "snmp_trap" [ 279.071488][ T5851] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 279.084874][ T7100] xt_CT: No such helper "snmp_trap" [ 279.106344][ T7107] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.233767][ T5851] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 279.237133][ T5851] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 279.240672][ T5851] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 279.244411][ T5851] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 279.247902][ T5851] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.258714][ T5851] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 279.261562][ T5851] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.264496][ T5851] usb 8-1: Product: syz [ 279.265952][ T5851] usb 8-1: Manufacturer: syz [ 279.268310][ T5851] usb 8-1: SerialNumber: syz [ 279.270940][ T5851] usb 8-1: config 0 descriptor?? [ 279.278173][ T5851] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input37 [ 279.406057][ T7158] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.496737][ T7166] xt_CT: No such helper "snmp" [ 279.534697][ T7174] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 279.559745][ T5851] usb 8-1: USB disconnect, device number 16 [ 279.635499][ T7193] 9pnet_fd: Insufficient options for proto=fd [ 279.762727][ T7215] 9pnet_fd: Insufficient options for proto=fd [ 279.940238][ T7245] 9pnet_fd: Insufficient options for proto=fd [ 280.119391][ T7276] netlink: 'syz.2.16393': attribute type 10 has an invalid length. [ 280.136471][ T7281] netlink: 'syz.0.16395': attribute type 1 has an invalid length. [ 280.222427][ T7302] netlink: 'syz.0.16406': attribute type 10 has an invalid length. [ 280.249600][ T7307] netlink: 'syz.3.16408': attribute type 1 has an invalid length. [ 280.370535][ T7336] netlink: 'syz.2.16421': attribute type 1 has an invalid length. [ 280.380258][ T7334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.445294][ T7348] kAFS: unable to lookup cell '({^@' [ 280.555623][ T7376] kAFS: unable to lookup cell '({^@' [ 280.597512][ T7384] 8021q: adding VLAN 0 to HW filter on device bond9 [ 280.955696][ T7477] 8021q: adding VLAN 0 to HW filter on device bond9 [ 281.383072][ T7584] __nla_validate_parse: 10 callbacks suppressed [ 281.383085][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16544'. [ 281.399288][ T7588] autofs4:pid:7588:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 281.417522][ T7593] netlink: 'syz.0.16549': attribute type 1 has an invalid length. [ 281.420159][ T7593] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16549'. [ 281.496797][ T7607] netlink: 'syz.3.16562': attribute type 1 has an invalid length. [ 281.502303][ T7607] netlink: 224 bytes leftover after parsing attributes in process `syz.3.16562'. [ 281.650754][ T7636] netlink: 224 bytes leftover after parsing attributes in process `syz.2.16570'. [ 281.904149][ T1021] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 282.070588][ T1021] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 282.074225][ T1021] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 282.079339][ T1021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 282.083555][ T1021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 282.089355][ T1021] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.097199][ T1021] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 282.100882][ T1021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.104186][ T1021] usb 5-1: Product: syz [ 282.106048][ T1021] usb 5-1: Manufacturer: syz [ 282.109130][ T1021] usb 5-1: SerialNumber: syz [ 282.112177][ T1021] usb 5-1: config 0 descriptor?? [ 282.119989][ T1021] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input38 [ 282.298164][ T7719] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16612'. [ 282.403056][ T7872] usb 5-1: USB disconnect, device number 14 [ 282.598093][ T7751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16626'. [ 282.737704][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16638'. [ 282.915635][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16649'. [ 282.940764][ T7799] netlink: 'syz.2.16651': attribute type 11 has an invalid length. [ 282.944170][ T7799] netlink: 224 bytes leftover after parsing attributes in process `syz.2.16651'. [ 283.137280][ T7841] netlink: 'syz.3.16673': attribute type 11 has an invalid length. [ 283.288843][ T7874] netlink: 'syz.3.16690': attribute type 11 has an invalid length. [ 283.291436][ T7874] netlink: 224 bytes leftover after parsing attributes in process `syz.3.16690'. [ 283.533600][ T7926] netlink: 'syz.0.16718': attribute type 11 has an invalid length. [ 284.709582][ T8127] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 284.988162][ T8189] xt_SECMARK: invalid mode: 0 [ 285.165926][ T8225] xt_SECMARK: invalid mode: 0 [ 285.333351][ T8261] random: crng reseeded on system resumption [ 285.365700][ T8267] xt_SECMARK: invalid mode: 0 [ 285.509166][ T8299] misc userio: The device must be registered before sending interrupts [ 285.564013][ T8311] 8021q: adding VLAN 0 to HW filter on device bond7 [ 285.565971][ T8316] xt_hashlimit: Unknown mode mask 368, kernel too old? [ 285.577389][ T8318] validate_nla: 1 callbacks suppressed [ 285.577400][ T8318] netlink: 'syz.3.16890': attribute type 7 has an invalid length. [ 285.666094][ T8338] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 285.760479][ T8363] openvswitch: netlink: Actions may not be safe on all matching packets [ 285.783915][ T8367] dlm: no locking on control device [ 286.805508][ T40] audit: type=1326 audit(2000000083.222:63590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.3.16934" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 286.813861][ T40] audit: type=1326 audit(2000000083.222:63591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.3.16934" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 286.821480][ T40] audit: type=1326 audit(2000000083.222:63592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.3.16934" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 286.829549][ T40] audit: type=1326 audit(2000000083.222:63593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.3.16934" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 286.836407][ T40] audit: type=1326 audit(2000000083.222:63594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.3.16934" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 286.902310][ T8427] 8021q: adding VLAN 0 to HW filter on device bond10 [ 286.915746][ T8431] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 287.036774][ T8459] dlm: no locking on control device [ 287.037438][ T8461] openvswitch: netlink: Actions may not be safe on all matching packets [ 287.099108][ T40] audit: type=1326 audit(2000000083.493:63595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.1.16967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 287.106860][ T40] audit: type=1326 audit(2000000083.493:63596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.1.16967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 287.116355][ T40] audit: type=1326 audit(2000000083.493:63597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.1.16967" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 287.123181][ T40] audit: type=1326 audit(2000000083.493:63598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.1.16967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 287.123726][ T8479] dlm: no locking on control device [ 287.129859][ T40] audit: type=1326 audit(2000000083.493:63599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.1.16967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 287.165080][ T8485] usb usb8: usbfs: process 8485 (syz.3.16972) did not claim interface 0 before use [ 287.200437][ T8496] openvswitch: netlink: Actions may not be safe on all matching packets [ 287.348642][ T8532] tmpfs: Bad value for 'mpol' [ 287.412553][ T8548] __nla_validate_parse: 2 callbacks suppressed [ 287.412565][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17003'. [ 287.596184][ T8597] veth1_vlan: left promiscuous mode [ 287.605544][ T8601] syz.3.17029: attempt to access beyond end of device [ 287.605544][ T8601] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 287.610819][ T8601] gfs2: error -5 reading superblock [ 287.657148][ T8607] i2c i2c-1: Invalid block write size 34 [ 288.929542][ T8699] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 288.932677][ T8699] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 288.965835][ T8705] xt_ecn: cannot match TCP bits for non-tcp packets [ 289.172377][ T8750] syz.0.17102: attempt to access beyond end of device [ 289.172377][ T8750] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 289.177414][ T8750] gfs2: error -5 reading superblock [ 289.186704][ T8752] i2c i2c-1: Invalid block write size 34 [ 289.282499][ T8768] syz.2.17116: attempt to access beyond end of device [ 289.282499][ T8768] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 289.287724][ T8768] gfs2: error -5 reading superblock [ 289.354174][ T8779] i2c i2c-1: Invalid block write size 34 [ 289.506290][ T8811] i2c i2c-1: Invalid block write size 34 [ 289.626729][ T8839] i2c i2c-1: Invalid block write size 34 [ 290.060915][ T8931] xt_ecn: cannot match TCP bits for non-tcp packets [ 291.470594][ T9030] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17234'. [ 291.659304][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17249'. [ 291.781278][ T9087] netlink: 'syz.3.17258': attribute type 10 has an invalid length. [ 291.786174][ T9087] netlink: 2 bytes leftover after parsing attributes in process `syz.3.17258'. [ 291.790601][ T9087] team0: entered promiscuous mode [ 291.792258][ T9087] C: entered promiscuous mode [ 291.794188][ T9087] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 291.796628][ T9087] bridge0: port 4(team0) entered blocking state [ 291.798958][ T9087] bridge0: port 4(team0) entered disabled state [ 291.801230][ T9087] team0: entered allmulticast mode [ 291.802964][ T9087] C: entered allmulticast mode [ 291.806213][ T9087] team_slave_1: entered allmulticast mode [ 291.808015][ T9087] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 291.813250][ T9087] bridge0: port 4(team0) entered blocking state [ 291.815907][ T9087] bridge0: port 4(team0) entered forwarding state [ 291.816960][ T9094] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 291.972646][ T9123] XFS (nbd3): no-recovery mounts must be read-only. [ 292.074898][ T9145] XFS (nbd0): no-recovery mounts must be read-only. [ 292.086286][ T9149] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 292.173808][ T9166] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 292.203036][ T9172] XFS (nbd2): no-recovery mounts must be read-only. [ 292.304482][ T9191] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17308'. [ 292.477615][ T9213] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17318'. [ 292.623221][ T9238] netlink: 'syz.2.17329': attribute type 10 has an invalid length. [ 292.625925][ T9238] netlink: 2 bytes leftover after parsing attributes in process `syz.2.17329'. [ 292.630346][ T9238] team0: entered promiscuous mode [ 292.631994][ T9238] team_slave_0: entered promiscuous mode [ 292.633966][ T9238] team_slave_1: entered promiscuous mode [ 292.638607][ T9238] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 292.648519][ T9238] bridge0: port 4(team0) entered blocking state [ 292.651377][ T9238] bridge0: port 4(team0) entered disabled state [ 292.657267][ T9238] team0: entered allmulticast mode [ 292.662656][ T9238] team_slave_0: entered allmulticast mode [ 292.664475][ T9238] team_slave_1: entered allmulticast mode [ 292.666292][ T9238] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 292.673172][ T9238] bridge0: port 4(team0) entered blocking state [ 292.675248][ T9238] bridge0: port 4(team0) entered forwarding state [ 292.696673][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17333'. [ 292.817245][ T9274] Invalid source name [ 292.818610][ T9274] UBIFS error (pid: 9274): cannot open "./file0", error -22 [ 292.841709][ T9278] netlink: 'syz.1.17344': attribute type 10 has an invalid length. [ 292.847320][ T9278] netlink: 2 bytes leftover after parsing attributes in process `syz.1.17344'. [ 292.850145][ T9278] team0: entered promiscuous mode [ 292.852687][ T9278] team_slave_0: entered promiscuous mode [ 292.854806][ T9278] bridge0: port 4(team0) entered blocking state [ 292.856855][ T9278] bridge0: port 4(team0) entered disabled state [ 292.858913][ T9278] team0: entered allmulticast mode [ 292.860536][ T9278] team_slave_0: entered allmulticast mode [ 292.864578][ T9278] team_slave_1: entered allmulticast mode [ 292.869270][ T9278] bridge0: port 4(team0) entered blocking state [ 292.872153][ T9278] bridge0: port 4(team0) entered forwarding state [ 292.927621][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17359'. [ 292.998134][ T9304] Invalid source name [ 292.999767][ T9304] UBIFS error (pid: 9304): cannot open "./file0", error -22 [ 293.095144][ T9307] mkiss: ax0: crc mode is auto. [ 293.272560][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17362'. [ 293.291821][ T9319] netlink: 'syz.0.17361': attribute type 10 has an invalid length. [ 293.295246][ T9319] netlink: 2 bytes leftover after parsing attributes in process `syz.0.17361'. [ 293.299050][ T9319] team0: entered promiscuous mode [ 293.302110][ T9319] C: entered promiscuous mode [ 293.304702][ T9319] bridge0: port 4(team0) entered blocking state [ 293.307549][ T9319] bridge0: port 4(team0) entered disabled state [ 293.310444][ T9319] team0: entered allmulticast mode [ 293.312682][ T9319] C: entered allmulticast mode [ 293.314751][ T9319] team_slave_1: entered allmulticast mode [ 293.319435][ T9319] bridge0: port 4(team0) entered blocking state [ 293.322302][ T9319] bridge0: port 4(team0) entered forwarding state [ 293.631299][ T9386] netlink: 'syz.2.17399': attribute type 10 has an invalid length. [ 293.634331][ T9386] netlink: 2 bytes leftover after parsing attributes in process `syz.2.17399'. [ 293.663255][ T9391] binder: BC_ATTEMPT_ACQUIRE not supported [ 293.671166][ T9391] binder: 9389:9391 ioctl c0306201 800001c0 returned -22 [ 293.774934][ T9410] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 293.777833][ T9410] overlayfs: missing 'lowerdir' [ 293.793383][ T9414] hpfs: Bad magic ... probably not HPFS [ 293.871246][ T9428] comedi comedi2: dt2801: I/O port conflict (0x4f27,2) [ 293.917083][ T9438] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 293.920050][ T9438] overlayfs: missing 'lowerdir' [ 293.982382][ T9450] hpfs: Bad magic ... probably not HPFS [ 294.064883][ T9469] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 294.067809][ T9469] overlayfs: missing 'lowerdir' [ 294.097532][ T9475] comedi comedi2: dt2801: I/O port conflict (0x4f27,2) [ 294.120094][ T9481] binder: 9480:9481 ioctl 40046205 0 returned -22 [ 294.165769][ T9489] ================================================================== [ 294.168407][ T9489] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x21d2/0x43c0 [ 294.171166][ T9489] Write of size 255 at addr ffffc9003261af8a by task vivid-000-vid-c/9489 [ 294.174391][ T9489] [ 294.175691][ T9489] CPU: 0 UID: 0 PID: 9489 Comm: vivid-000-vid-c Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 294.175705][ T9489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 294.175712][ T9489] Call Trace: [ 294.175716][ T9489] [ 294.175720][ T9489] dump_stack_lvl+0x116/0x1f0 [ 294.175737][ T9489] print_report+0xcd/0x630 [ 294.175750][ T9489] ? __virt_addr_valid+0x81/0x610 [ 294.175764][ T9489] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 294.175778][ T9489] kasan_report+0xe0/0x110 [ 294.175791][ T9489] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 294.175806][ T9489] kasan_check_range+0x100/0x1b0 [ 294.175821][ T9489] __asan_memcpy+0x3c/0x60 [ 294.175830][ T9489] tpg_fill_plane_buffer+0x21d2/0x43c0 [ 294.175850][ T9489] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 294.175864][ T9489] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 294.175880][ T9489] vivid_fillbuff+0x8d2/0x4250 [ 294.175899][ T9489] ? __pfx_vivid_fillbuff+0x10/0x10 [ 294.175917][ T9489] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 294.175927][ T9489] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.175940][ T9489] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 294.175953][ T9489] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 294.175969][ T9489] vivid_thread_vid_cap+0x454/0xda0 [ 294.175985][ T9489] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 294.175999][ T9489] ? do_raw_spin_lock+0x12c/0x2b0 [ 294.176015][ T9489] ? find_held_lock+0x2b/0x80 [ 294.176025][ T9489] ? rcu_is_watching+0x12/0xc0 [ 294.176036][ T9489] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 294.176047][ T9489] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.176058][ T9489] ? __kthread_parkme+0x19e/0x250 [ 294.176070][ T9489] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 294.176085][ T9489] kthread+0x3c2/0x780 [ 294.176098][ T9489] ? __pfx_kthread+0x10/0x10 [ 294.176112][ T9489] ? rcu_is_watching+0x12/0xc0 [ 294.176121][ T9489] ? __pfx_kthread+0x10/0x10 [ 294.176135][ T9489] ret_from_fork+0x5d4/0x6f0 [ 294.176163][ T9489] ? __pfx_kthread+0x10/0x10 [ 294.176177][ T9489] ret_from_fork_asm+0x1a/0x30 [ 294.176195][ T9489] [ 294.176199][ T9489] [ 294.247167][ T9489] The buggy address belongs to a vmalloc virtual mapping [ 294.249964][ T9489] The buggy address belongs to the physical page: [ 294.252521][ T9489] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x51e8a [ 294.256498][ T9489] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 294.259383][ T9489] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 294.262779][ T9489] raw: ffff888000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 294.265822][ T9489] page dumped because: kasan: bad access detected [ 294.267899][ T9489] page_owner tracks the page as allocated [ 294.270034][ T9489] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 9483, tgid 9482 (syz.3.17447), ts 294130076945, free_ts 293418034638 [ 294.276014][ T9489] post_alloc_hook+0x1c0/0x230 [ 294.277584][ T9489] get_page_from_freelist+0x1321/0x3890 [ 294.279381][ T9489] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 294.281285][ T9489] alloc_pages_mpol+0x1fb/0x550 [ 294.282871][ T9489] alloc_pages_noprof+0x131/0x390 [ 294.284503][ T9489] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 294.286428][ T9489] vmalloc_user_noprof+0x9e/0xe0 [ 294.288061][ T9489] vb2_vmalloc_alloc+0x135/0x3f0 [ 294.289663][ T9489] __vb2_queue_alloc+0x8c9/0x1280 [ 294.291331][ T9489] vb2_core_reqbufs+0xa90/0xfe0 [ 294.292914][ T9489] __vb2_init_fileio+0x3f1/0x1100 [ 294.294540][ T9489] __vb2_perform_fileio+0x9c2/0x1660 [ 294.296241][ T9489] vb2_fop_read+0x215/0x3e0 [ 294.297725][ T9489] v4l2_read+0x226/0x360 [ 294.299097][ T9489] vfs_read+0x1e4/0xc60 [ 294.300451][ T9489] ksys_read+0x12a/0x250 [ 294.301944][ T9489] page last free pid 9334 tgid 9334 stack trace: [ 294.304145][ T9489] __free_frozen_pages+0x7fe/0x1180 [ 294.305825][ T9489] tlb_remove_table_rcu+0x116/0x1a0 [ 294.307479][ T9489] rcu_core+0x79c/0x14e0 [ 294.309162][ T9489] handle_softirqs+0x219/0x8e0 [ 294.310727][ T9489] __irq_exit_rcu+0x109/0x170 [ 294.312240][ T9489] irq_exit_rcu+0x9/0x30 [ 294.313776][ T9489] sysvec_apic_timer_interrupt+0x57/0xc0 [ 294.316022][ T9489] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 294.318434][ T9489] [ 294.319409][ T9489] Memory state around the buggy address: [ 294.321646][ T9489] ffffc9003261af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 294.324865][ T9489] ffffc9003261af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 294.328101][ T9489] >ffffc9003261b000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 294.331305][ T9489] ^ [ 294.332958][ T9489] ffffc9003261b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 294.336175][ T9489] ffffc9003261b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 294.339378][ T9489] ================================================================== [ 294.343839][ T9489] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 294.346748][ T9489] CPU: 0 UID: 0 PID: 9489 Comm: vivid-000-vid-c Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 294.351548][ T9489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 294.355821][ T9489] Call Trace: [ 294.357197][ T9489] [ 294.358409][ T9489] dump_stack_lvl+0x3d/0x1f0 [ 294.360282][ T9489] panic+0x71c/0x800 [ 294.361880][ T9489] ? __pfx_panic+0x10/0x10 [ 294.363679][ T9489] ? irqentry_exit+0x3b/0x90 [ 294.365543][ T9489] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.367644][ T9489] ? preempt_schedule_thunk+0x16/0x30 [ 294.369483][ T9489] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 294.371294][ T9489] ? preempt_schedule_common+0x44/0xc0 [ 294.373036][ T9489] ? check_panic_on_warn+0x1f/0xb0 [ 294.374705][ T9489] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 294.376510][ T9489] check_panic_on_warn+0xab/0xb0 [ 294.378134][ T9489] end_report+0x107/0x170 [ 294.379523][ T9489] kasan_report+0xee/0x110 [ 294.380961][ T9489] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 294.382765][ T9489] kasan_check_range+0x100/0x1b0 [ 294.384363][ T9489] __asan_memcpy+0x3c/0x60 [ 294.385822][ T9489] tpg_fill_plane_buffer+0x21d2/0x43c0 [ 294.387595][ T9489] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 294.389515][ T9489] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 294.391394][ T9489] vivid_fillbuff+0x8d2/0x4250 [ 294.392943][ T9489] ? __pfx_vivid_fillbuff+0x10/0x10 [ 294.394631][ T9489] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 294.396426][ T9489] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.398123][ T9489] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 294.400006][ T9489] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 294.401860][ T9489] vivid_thread_vid_cap+0x454/0xda0 [ 294.403596][ T9489] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 294.405442][ T9489] ? do_raw_spin_lock+0x12c/0x2b0 [ 294.407121][ T9489] ? find_held_lock+0x2b/0x80 [ 294.408649][ T9489] ? rcu_is_watching+0x12/0xc0 [ 294.410217][ T9489] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 294.412097][ T9489] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.413886][ T9489] ? __kthread_parkme+0x19e/0x250 [ 294.415514][ T9489] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 294.417344][ T9489] kthread+0x3c2/0x780 [ 294.418688][ T9489] ? __pfx_kthread+0x10/0x10 [ 294.420179][ T9489] ? rcu_is_watching+0x12/0xc0 [ 294.421721][ T9489] ? __pfx_kthread+0x10/0x10 [ 294.423208][ T9489] ret_from_fork+0x5d4/0x6f0 [ 294.424712][ T9489] ? __pfx_kthread+0x10/0x10 [ 294.426212][ T9489] ret_from_fork_asm+0x1a/0x30 [ 294.427785][ T9489] [ 294.429389][ T9489] Kernel Offset: disabled [ 294.430820][ T9489] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:56:41 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855dca25 RDI=ffffffff9b09c740 RBP=ffffffff9b09c700 RSP=ffffc90027167158 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000074697257 R12=0000000000000000 R13=0000000000000069 R14=ffffffff9b09c700 R15=ffffffff855dc9c0 RIP=ffffffff855dca4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097530000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7406188 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000006dd81f02 RBX=0000000000000011 RCX=ffff88805fb2b3d0 RDX=00000000504a282e RSI=0000000000000001 RDI=00000000d6c0de40 RBP=0000000000000001 RSP=ffffc9000342f490 R8 =0000000000000001 R9 =ffff88807a41f020 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=000000006dd81f02 R14=ffffc9000342f4f8 R15=0000000000000011 RIP=ffffffff8510af8e RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097630000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73d5230 CR3=000000006ac7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000004fffffff3 0000012800000094 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=00000000000651fb RCX=ffffffff822af3c1 RDX=0000000000000001 RSI=ffffffff8c15d600 RDI=ffffffff8c15d640 RBP=ffff88803fffa580 RSP=ffffc9002739f6e0 R8 =0000000000000006 R9 =0000000000001000 R10=0000000000000000 R11=0000000000000001 R12=ffff88803f600000 R13=ffff88807ffce400 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b86c3f8 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097730000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73bff20 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000014 RCX=ffffffff84e5a476 RDX=ffff8880233dc880 RSI=ffffffff84e5a4b5 RDI=0000000000000001 RBP=ffffc9000106f330 RSP=ffffc9000106f1f0 R8 =0000000000000001 R9 =0000000000000040 R10=0000000000000010 R11=0000000000000001 R12=1ffff9200020de48 R13=0000000000000010 R14=0000000000000001 R15=ffffffff8c160171 RIP=ffffffff81bb1598 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe4dadae300 ffffffff 00c00000 GS =0000 ffff888097830000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056252dcb3000 CR3=000000004b69d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000003800000012 0004000000080024 002800000030003c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000002000000000 0000000000000000 0000000000000017 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2008000600719004 000000a600000001 0000000100000000 0000000000004431 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030fffffffff0204 a003020800049803 2808001788030210 b88084000ca60300 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10b08084000ca603 0001e0808084000c a4030804000ca003 0008000c98030008 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c900306a0afc2 8cbebebab904000c 8c0301d404000c88 032808000c80030c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8002178003178002 0490030008000488 030fffffffff0204 8003000800060800 ZMM24=f010c124f010c124 f010c124f010c124 f010c124f010c124 f010c124f010c124 f010c124f010c124 f010c124f010c124 f010c124f010c124 f010c124f010c124 ZMM25=70acf03170acf031 70acf03170acf031 70acf03170acf031 70acf03170acf031 70acf03170acf031 70acf03170acf031 70acf03170acf031 70acf03170acf031 ZMM26=43e377dc43e377dc 43e377dc43e377dc 43e377dc43e377dc 43e377dc43e377dc 43e377dc43e377dc 43e377dc43e377dc 43e377dc43e377dc 43e377dc43e377dc ZMM27=f9db9acaf9db9aca f9db9acaf9db9aca f9db9acaf9db9aca f9db9acaf9db9aca f9db9acaf9db9aca f9db9acaf9db9aca f9db9acaf9db9aca f9db9acaf9db9aca ZMM28=000000e0000000df 000000de000000dd 000000dc000000db 000000da000000d9 000000d8000000d7 000000d6000000d5 000000d4000000d3 000000d2000000d1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0b4200000b420000 0b4200000b420000 0b4200000b420000 0b4200000b420000 0b4200000b420000 0b4200000b420000 0b4200000b420000 0b4200000b420000